Lucene search

K
nessusTenable8361.PRM
HistorySep 02, 2014 - 12:00 a.m.

Mozilla Firefox < 32.0 Multiple Vulnerabilities

2014-09-0200:00:00
Tenable
www.tenable.com
10

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.693 Medium

EPSS

Percentile

98.0%

Versions of Mozilla Firefox earlier than 32.0 are unpatched for the following vulnerabilities :

  • Use-after-free vulnerabilities – when setting text direction, and when interacting with SVG content through the DOM – which can be leveraged for arbitrary code execution (CVE-2014-1567, CVE-2014-1563)
  • Out-of-bounds read in the Web Audio audio timeline that can trigger a crash and potentially disclose memory content (CVE-2014-1565)
  • Incomplete memory initialization when rendering a malformed GIF image could expose that memory to scripts via web content using the ‘<canvas>’ feature, resulting in information disclosure (CVE-2014-1564)
  • Other undisclosed memory issues that have since been patched (CVE-2014-1553, CVE-2014-1554, CVE-2014-1562)
Binary data 8361.prm
VendorProductVersionCPE
mozillafirefoxcpe:/a:mozilla:firefox

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.693 Medium

EPSS

Percentile

98.0%