Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD7AE61870-9DD2-4884-A2F2-F19BB5784D09
HistoryDec 01, 2014 - 12:00 a.m.

mozilla -- multiple vulnerabilities

2014-12-0100:00:00
vuxml.freebsd.org
21

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.119 Low

EPSS

Percentile

95.3%

JSON

The Mozilla Project reports:

ASN.1 DER decoding of lengths is too permissive, allowing
undetected smuggling of arbitrary data
MFSA-2014-90 Apple CoreGraphics framework on OS X 10.10
logging input data to /tmp directory
MFSA-2014-89 Bad casting from the BasicThebesLayer to
BasicContainerLayer
MFSA-2014-88 Buffer overflow while parsing media content
MFSA-2014-87 Use-after-free during HTML5 parsing
MFSA-2014-86 CSP leaks redirect data via violation reports
MFSA-2014-85 XMLHttpRequest crashes with some input streams
MFSA-2014-84 XBL bindings accessible via improper CSS
declarations
MFSA-2014-83 Miscellaneous memory safety hazards (rv:34.0
/ rv:31.3)

Related

nessus 45
openvas 47
suse 8
ubuntu 3
securityvulns 7
archlinux 2
redhat 2
oraclelinux 2
debian 5
mageia 2
centos 2
osv 4
mozilla 8
prion 10
cve 10
ubuntucve 10
veracode 6
ibm 1
exploitdb 1
fedora 4
exploitpack 1
zdt 1
debiancve 1
gentoo 1
oracle 2
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (7ae61870-9dd2-4884-a2f2-f19bb5784d09)
2014-12-04 00:00:00
SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10064)
2014-12-15 00:00:00
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2424-1)
2014-12-03 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1624-1)
2021-06-09 00:00:00
SUSE: Security Advisory for Mozilla (SUSE-SU-2014:1624-1)
2015-10-13 00:00:00
Ubuntu: Security Advisory (USN-2424-1)
2022-08-26 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2014-12-12 03:05:16
Firefox update to latest 31ESR release (important)
2015-01-25 16:04:59
Security update for MozillaFirefox (important)
2015-01-19 13:04:47
ubuntu
ubuntu
Firefox vulnerabilities
2014-12-02 00:00:00
Thunderbird vulnerabilities
2014-12-03 00:00:00
NSS vulnerability
2015-01-07 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-12-08 00:00:00
Mozilla nss information leakage
2014-12-22 00:00:00
[ MDVSA-2014:252 ] nss
2014-12-22 00:00:00
archlinux
archlinux
firefox: multiple issues
2014-12-03 00:00:00
nss: signature forgery
2014-12-16 00:00:00
redhat
redhat
(RHSA-2014:1924) Important: thunderbird security update
2014-12-02 00:00:00
(RHSA-2014:1919) Critical: firefox security update
2014-12-02 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2014-12-02 00:00:00
firefox security update
2014-12-03 00:00:00
debian
debian
[SECURITY] [DSA 3092-1] icedove security update
2014-12-07 19:07:11
[SECURITY] [DSA 3090-1] iceweasel security update
2014-12-04 15:30:11
[SECURITY] [DSA 3186-1] nss security update
2015-03-13 08:15:52
mageia
mageia
Updated iceape package fixes security vulnerabilities
2014-12-09 23:12:41
Updated firefox & thunderbird packages fix security vulnerabilities
2014-12-03 22:27:32
centos
centos
thunderbird security update
2014-12-03 22:57:24
firefox security update
2014-12-03 22:51:38
osv
osv
iceweasel - security update
2014-12-04 00:00:00
icedove - security update
2014-12-07 00:00:00
nss - security update
2015-03-13 00:00:00
mozilla
mozilla
Miscellaneous memory safety hazards (rv:34.0 / rv:31.3) — Mozilla
2014-12-02 00:00:00
XMLHttpRequest crashes with some input streams — Mozilla
2014-12-02 00:00:00
Bad casting from the BasicThebesLayer to BasicContainerLayer — Mozilla
2014-12-02 00:00:00
prion
prion
Memory corruption
2014-12-11 11:59:00
Design/Logic Flaw
2014-12-11 11:59:00
Design/Logic Flaw
2014-12-11 11:59:00
cve
cve
CVE-2014-1588
2014-12-11 11:59:00
CVE-2014-1589
2014-12-11 11:59:00
CVE-2014-1594
2014-12-11 11:59:00
ubuntucve
ubuntucve
CVE-2014-1588
2014-12-02 00:00:00
CVE-2014-1589
2014-12-02 00:00:00
CVE-2014-1595
2014-12-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:05:37
Arbitrary Code Execution
2019-05-02 05:05:37
Arbitrary Code Execution
2019-05-02 05:05:37
ibm
ibm
Security Bulletin: Mozilla Firefox vulnerability issues in IBM SONAS (CVE-2014-1574, CVE-2014-1576, CVE-2014-1577, CVE-2014-1578, CVE-2014-1581, CVE-2014-1583, CVE-2014-1587, CVE-2014-1588, and 11 more)
2018-06-18 00:09:21
exploitdb
exploitdb
MatrixSSL < 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates
2019-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: nss-3.17.3-2.fc21
2014-12-25 05:35:12
[SECURITY] Fedora 20 Update: nss-util-3.17.3-1.fc20
2015-01-07 23:54:35
[SECURITY] Fedora 20 Update: nss-softokn-3.17.3-1.fc20
2015-01-07 23:54:35
exploitpack
exploitpack
MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates
2019-02-20 00:00:00
zdt
zdt
MatrixSSL < 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates Vulnerability
2019-02-20 00:00:00
debiancve
debiancve
CVE-2014-1569
2014-12-15 18:59:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.119 Low

EPSS

Percentile

95.3%

JSON
Related for 7AE61870-9DD2-4884-A2F2-F19BB5784D09
nessus45openvas47suse8ubuntu3securityvulns7archlinux2redhat2oraclelinux2debian5mageia2centos2osv4mozilla8prion10cve10ubuntucve10veracode6ibm1exploitdb1fedora4exploitpack1zdt1debiancve1gentoo1oracle2