Lucene search

K
cve[email protected]CVE-2014-1494
HistoryMar 19, 2014 - 10:55 a.m.

CVE-2014-1494

2014-03-1910:55:06
web.nvd.nist.gov
44
4
cve-2014-1494
mozilla firefox
seamonkey
browser engine
denial of service
memory corruption
application crash
arbitrary code execution
remote attackers
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.9 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.2%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected configurations

NVD
Node
mozillaseamonkeyRange<2.25
Node
suselinux_enterprise_desktopMatch11sp3
OR
suselinux_enterprise_serverMatch11sp3
OR
suselinux_enterprise_serverMatch11sp3vmware
OR
suselinux_enterprise_software_development_kitMatch11sp3
Node
oraclesolarisMatch11.3
Node
opensuseopensuseMatch13.1
OR
opensuse_projectopensuseMatch11.4
OR
opensuse_projectopensuseMatch12.3
Node
mozillafirefoxRange<28.0

References

Social References

More

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.9 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.2%