PRIOn knowledge basePRION:CVE-2014-1486Design/Logic Flaw
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 13.10 | |
| ubuntu_linux | eq | 12.10 | |
| ubuntu_linux | eq | 12.04 | |
| debian_linux | eq | 7.0 | |
| fedora | eq | 20 | |
| fedora | eq | 19 | |
| firefox | lt | 27.0 | |
| firefox_esr | ge | 24.0 | |
| firefox_esr | lt | 24.3 | |
| seamonkey | lt | 2.24 |
References
download.novell.com/Download?buildid=VYQsgaFpQ2k
download.novell.com/Download?buildid=Y2fux-JW1Qc
lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html
lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html
lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html
osvdb.org/102872
rhn.redhat.com/errata/RHSA-2014-0132.html
rhn.redhat.com/errata/RHSA-2014-0133.html
secunia.com/advisories/56706
secunia.com/advisories/56761
secunia.com/advisories/56763
secunia.com/advisories/56767
secunia.com/advisories/56787
secunia.com/advisories/56858
secunia.com/advisories/56888
secunia.com/advisories/56922
www.debian.org/security/2014/dsa-2858
www.mozilla.org/security/announce/2014/mfsa2014-08.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securityfocus.com/bid/65334
www.securitytracker.com/id/1029717
www.securitytracker.com/id/1029720
www.securitytracker.com/id/1029721
www.ubuntu.com/usn/USN-2102-1
www.ubuntu.com/usn/USN-2102-2
www.ubuntu.com/usn/USN-2119-1
8pecxstudios.com/?page_id=44080
bugzilla.mozilla.org/show_bug.cgi?id=942164
exchange.xforce.ibmcloud.com/vulnerabilities/90890
lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html
lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html
security.gentoo.org/glsa/201504-01
Related
