Lucene search
Tenable8292.PRMHistoryJun 11, 2014 - 12:00 a.m.
Mozilla Thunderbird < 24.6 Multiple Vulnerabilities
2014-06-1100:00:00
Tenable
www.tenable.com
7
Versions of Mozilla Thunderbird prior to 24.6 are unpatched against the following vulnerabilities :
- Use-after-free issue in the SMIL Animation Controller, among other use-after-free and out-of-bounds issues, which may be exploited via web content to induce a potentially exploitable crash. (CVE-2014-1541, CVE-2014-1536, CVE-2014-1537, CVE-2014-1538)
- Click-jacking that can be exploited due to cursor invisibility when leaving an embedded flash object (Note, only OS X is affected: CVE-2014-1539)
- Other miscellaneous memory safety hazards (CVE-2014-1533, CVE-2014-1534)
Binary data 8292.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | thunderbird | cpe:/a:mozilla:thunderbird |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1533
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1534
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1536
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1537
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1538
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1539
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1541
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1545
www.mozilla.org/security/announce/2014/mfsa2014-48.html
www.mozilla.org/security/announce/2014/mfsa2014-49.html
www.mozilla.org/security/announce/2014/mfsa2014-50.html
www.mozilla.org/security/announce/2014/mfsa2014-52.html
Related
nessus
nessus
Thunderbird < 24.6 Multiple Vulnerabilities (Mac OS X)
2014-06-11 00:00:00
Mozilla Thunderbird < 24.6 Multiple Vulnerabilities
2014-06-11 00:00:00
SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9370)
2014-06-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:0824-1)
2021-06-09 00:00:00
SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0824-1)
2015-10-13 00:00:00
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2014:0797-1)
2014-06-17 00:00:00
suse
suse
Mozilla updates 2014/06 (critical)
2014-06-16 08:04:13
Security update for MozillaFirefox (important)
2014-06-21 01:04:47
Security update for MozillaFirefox (important)
2014-06-25 00:04:17
ubuntu
ubuntu
Firefox vulnerabilities
2014-06-11 00:00:00
Thunderbird vulnerabilities
2014-06-19 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-06-13 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:58:34
Use-After-Free
2019-05-02 04:58:34
Remote Code Execution (RCE)
2019-01-15 08:53:46
centos
centos
firefox security update
2014-06-11 10:49:01
thunderbird security update
2014-06-11 10:54:29
mageia
mageia
Updated firefox & thunderbird packages fix multiple security vulnerabilities
2014-06-11 21:13:59
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
oraclelinux
oraclelinux
thunderbird security update
2014-06-10 00:00:00
firefox security update
2014-06-10 00:00:00
mozilla
mozilla
Miscellaneous memory safety hazards (rv:30.0 / rv:24.6) — Mozilla
2014-06-10 00:00:00
Clickjacking through cursor invisibility after Flash interaction — Mozilla
2014-06-10 00:00:00
redhat
redhat
(RHSA-2014:0741) Critical: firefox security update
2014-06-10 00:00:00
(RHSA-2014:0742) Important: thunderbird security update
2014-06-10 00:00:00
osv
osv
iceweasel - security update
2014-06-11 00:00:00
icedove - security update
2014-06-16 00:00:00
debian
debian
[SECURITY] [DSA 2955-1] iceweasel security update
2014-06-11 14:33:41
[SECURITY] [DSA 2960-1] icedove security update
2014-06-16 17:13:24
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-06-10 00:00:00
ubuntucve
ubuntucve
prion
prion
Code injection
2014-06-11 10:57:00
Out-of-bounds
2014-06-11 10:57:00
Memory corruption
2014-06-11 10:57:00
cve
cve
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
Related for 8292.PRM