2 matches found
Firefox ESR Data Compromise
The use of this feature after release in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox ESR allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when working with dynamic memory through SVG animations that interact with the...
10CVSS7.5AI score0.05801EPSS
SaveExploits0References3Affected Software1
UBUNTU-CVE-2014-1563
Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...
10CVSS7.3AI score0.05801EPSS
SaveExploits0References5
20