Lucene search

K
cve[email protected]CVE-2014-1540
HistoryJun 11, 2014 - 10:57 a.m.

CVE-2014-1540

2014-06-1110:57:00
NVD-CWE-Other
web.nvd.nist.gov
38
mozilla
firefox
cve-2014-1540
use-after-free vulnerability
remote code execution
heap memory corruption
nvd

9.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.024 Low

EPSS

Percentile

89.7%

Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle29.0.1

9.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.024 Low

EPSS

Percentile

89.7%