Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10119
HistoryJul 22, 2014 - 12:00 a.m.

KLA10119 Multiple vulnerabilities in Mozilla

2014-07-2200:00:00
Kaspersky Lab
threats.kaspersky.com
80

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.264 Low

EPSS

Percentile

96.7%

JSON

Detect date:

07/22/2014

Severity:

Critical

Description:

An unspecified vulnerability was found in Clam Anti-virus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the OLE2 parser via a specially designed file. Below is a complete list of vulnerabilities

Affected products:

Mozilla Firefox ESR 24.6.0 and earlier
Mozilla Firefox 30.0 and earlier
Waterfox Firefox 30.0 and earlier
Mozilla Thunderbird 30.0 and earlier
CometBird all versions

Solution:

Update to latest version
Thunderbird
Firefox

Original advisories:

MFSA

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2014-1547
CVE-2014-1548
CVE-2014-1555
CVE-2014-1551
CVE-2014-1544
CVE-2014-1556
CVE-2014-1557

Related

nessus 52
openvas 49
suse 5
debian 5
osv 2
mageia 2
redhat 7
veracode 6
ibm 7
centos 4
oraclelinux 4
freebsd 1
ubuntu 3
mozilla 6
securityvulns 1
cve 7
ubuntucve 7
prion 7
amazon 1
debiancve 1
checkpoint_advisories 1
f5 2
gentoo 1
nessus
nessus
Oracle Solaris Third-Party Patch Update : firefox (multiple_vulnerabilities_fixed_in_firefox1)
2015-01-19 00:00:00
Mozilla Thunderbird 24.x < 24.7 Multiple Vulnerabilities
2014-07-24 00:00:00
Firefox ESR 24.x < 24.7 Multiple Vulnerabilities
2014-07-24 00:00:00
openvas
openvas
openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2014:0976-1)
2014-08-11 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Aug 2014) - Windows
2014-08-07 00:00:00
Debian: Security Advisory (DSA-2986-1)
2014-07-22 00:00:00
suse
suse
MozillaThunderbird: Update to 24.7.0 (important)
2014-08-11 10:05:21
Mozilla updates 07/2014 (important)
2014-07-30 20:47:31
Security update for Mozilla Firefox (important)
2014-08-02 01:04:22
debian
debian
[SECURITY] [DSA 2996-1] icedove security update
2014-08-03 08:52:34
[SECURITY] [DSA 2986-1] iceweasel security update
2014-07-23 19:50:45
[SECURITY] [DSA 3071-1] nss security update
2014-11-11 21:01:33
osv
osv
icedove - security update
2014-08-03 00:00:00
nss - security update
2014-11-11 00:00:00
mageia
mageia
Updated nss, firefox and thunderbird packages fix security vulnerabilities
2014-07-26 15:32:13
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
redhat
redhat
(RHSA-2014:0919) Critical: firefox security update
2014-07-22 00:00:00
(RHSA-2014:0918) Important: thunderbird security update
2014-07-22 00:00:00
(RHSA-2014:1165) Critical: nss security update
2014-09-08 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:03:37
Arbitrary Code Execution
2019-05-02 05:03:38
Arbitrary Code Execution
2019-05-02 05:03:38
ibm
ibm
Security Bulletin: Vulnerabilities in Firefox affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance
2018-06-17 22:30:11
Security Bulletin: IBM Storwize V7000 Unified security vulnerabilities related to Mozilla Firefox (CVE-2014-1555, CVE-2014-1556, CVE-2014-1557)
2018-06-18 00:08:32
Security Bulletin: Mozilla firefox vulnerability issues on IBM SONAS (CVE-2014-1555, CVE-2014-1556, CVE-2014-1557)
2018-06-18 00:08:32
centos
centos
firefox, xulrunner security update
2014-07-23 00:54:07
thunderbird security update
2014-07-23 01:35:12
nspr, nss security update
2014-07-23 00:41:58
oraclelinux
oraclelinux
firefox security update
2014-07-22 00:00:00
thunderbird security update
2014-07-22 00:00:00
nss and nspr security update
2014-07-22 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-07-22 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2014-07-22 00:00:00
Thunderbird vulnerabilities
2014-07-22 00:00:00
NSS vulnerability
2014-09-09 00:00:00
mozilla
mozilla
Miscellaneous memory safety hazards (rv:31.0 / rv:24.7) — Mozilla
2014-07-22 00:00:00
Exploitable WebGL crash with Cesium JavaScript library — Mozilla
2014-07-22 00:00:00
Use-after-free with FireOnStateChange event — Mozilla
2014-07-22 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-07-28 00:00:00
cve
cve
CVE-2014-1556
2014-07-23 11:12:00
CVE-2014-1555
2014-07-23 11:12:00
CVE-2014-1544
2014-07-23 11:12:00
ubuntucve
ubuntucve
CVE-2014-1555
2014-07-22 00:00:00
CVE-2014-1556
2014-07-22 00:00:00
CVE-2014-1557
2014-07-22 00:00:00
prion
prion
Design/Logic Flaw
2014-07-23 11:12:00
Code injection
2014-07-23 11:12:00
Information disclosure
2014-07-23 11:12:00
amazon
amazon
Critical: nss
2014-07-23 14:08:00
debiancve
debiancve
CVE-2014-1544
2014-07-23 11:12:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox SharedWorker MessagePort Use After Free (CVE-2014-1548)
2014-09-11 00:00:00
f5
f5
SOL16716 - Multiple Mozilla NSS vulnerabilities
2015-06-05 00:00:00
K16716 : Multiple Mozilla NSS vulnerabilities
2015-09-17 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.264 Low

EPSS

Percentile

96.7%

JSON
Related for KLA10119
nessus52openvas49suse5debian5osv2mageia2redhat7veracode6ibm7centos4oraclelinux4freebsd1ubuntu3mozilla6securityvulns1cve7ubuntucve7prion7amazon1debiancve1checkpoint_advisories1f52gentoo1