CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
95.5%
Debian Security Advisory DSA-3018-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
September 03, 2014 http://www.debian.org/security/faq
Package : iceweasel
CVE ID : CVE-2014-1562 CVE-2014-1567
Multiple security issues have been found in Iceweasel, Debian's version
of the Mozilla Firefox web browser: Multiple memory safety errors and
use-after-frees may lead to the execution of arbitrary code or denial
of service.
For the stable distribution (wheezy), these problems have been fixed in
version 24.8.0esr-1~deb7u1.
For the unstable distribution (sid), these problems have been fixed in
version 31.1.0esr-1.
We recommend that you upgrade your iceweasel packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | all | iceweasel-l10n-sv-se | < 1:24.8.0esr-1~deb7u1 | iceweasel-l10n-sv-se_1:24.8.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-ga-ie | < 1:24.8.0esr-1~deb7u1 | iceweasel-l10n-ga-ie_1:24.8.0esr-1~deb7u1_all.deb |
Debian | 7 | s390 | libmozjs24d-dbg | < 24.8.0esr-1~deb7u1 | libmozjs24d-dbg_24.8.0esr-1~deb7u1_s390.deb |
Debian | 7 | powerpc | icedove-dbg | < 24.8.0-1~deb7u1 | icedove-dbg_24.8.0-1~deb7u1_powerpc.deb |
Debian | 7 | all | iceweasel-l10n-gu-in | < 1:24.8.0esr-1~deb7u1 | iceweasel-l10n-gu-in_1:24.8.0esr-1~deb7u1_all.deb |
Debian | 7 | powerpc | libmozjs24d-dbg | < 24.8.0esr-1~deb7u1 | libmozjs24d-dbg_24.8.0esr-1~deb7u1_powerpc.deb |
Debian | 7 | s390 | spidermonkey-bin | < 24.8.0esr-1~deb7u1 | spidermonkey-bin_24.8.0esr-1~deb7u1_s390.deb |
Debian | 7 | all | iceweasel-l10n-ak | < 1:24.8.0esr-1~deb7u1 | iceweasel-l10n-ak_1:24.8.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-hy-am | < 1:24.8.0esr-1~deb7u1 | iceweasel-l10n-hy-am_1:24.8.0esr-1~deb7u1_all.deb |
Debian | 7 | powerpc | spidermonkey-bin | < 24.8.0esr-1~deb7u1 | spidermonkey-bin_24.8.0esr-1~deb7u1_powerpc.deb |