Firefox Data Compromise

The use of this feature after release in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when working with dynamic memory through SVG animations that interact with the document’...

Thunderbird Data Compromise

The use of this feature after release in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when working with dynamic memory through SVG animations th...

CVE-2014-1563: Use After Free

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

PT-2014-1479

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 32.0 Firefox ESR versions prior to 31.1 Thunderbird versions prior to 31.1 Description The issue is related to a use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function. This vulnerabili...