Lucene search
RootSSV:61408HistoryFeb 11, 2014 - 12:00 a.m.
Mozilla Firefox/Thunderbird/SeaMonkey释放后重用远程代码执行漏洞
2014-02-1100:00:00
Root
www.seebug.org
16
0.029 Low
EPSS
Percentile
89.7%
BUGTRAQ ID: 65334
CVE(CAN) ID: CVE-2014-1486
Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。
Mozilla Firefox, SeaMonkey在imgRequestProxy函数的实现上存在释放后重用安全漏洞，可使远程攻击者通过图形数据的内容类型值相关矢量，执行任意代码。
0
Mozilla Firefox < 27.0
Mozilla Thunderbird < 24.3
Mozilla SeaMonkey < 2.24
厂商补丁：
Mozilla
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.mozilla.org/security/
公告：
http://www.mozilla.org/security/announce/2014/mfsa2014-08.html
Related
cve
cve
CVE-2014-1486
2014-02-06 05:44:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-08) - Linux
2021-11-11 00:00:00
CentOS Update for thunderbird CESA-2014:0133 centos6
2014-02-11 00:00:00
Oracle: Security Advisory (ELSA-2014-0133)
2015-10-06 00:00:00
zdi
zdi
cvelist
cvelist
CVE-2014-1486
2014-02-06 02:00:00
prion
prion
Design/Logic Flaw
2014-02-06 05:44:00
ubuntucve
ubuntucve
CVE-2014-1486
2014-02-04 00:00:00
mozilla
mozilla
Use-after-free with imgRequestProxy and image proccessing — Mozilla
2014-02-04 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:00:59
Authentication Bypass
2019-05-02 05:00:58
Denial Of Service (DoS)
2019-05-02 05:00:59
redhat
redhat
(RHSA-2014:0133) Important: thunderbird security update
2014-02-04 00:00:00
(RHSA-2014:0132) Critical: firefox security update
2014-02-04 00:00:00
nessus
nessus
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20140204)
2014-02-05 00:00:00
RHEL 5 / 6 : thunderbird (RHSA-2014:0133)
2014-02-05 00:00:00
CentOS 5 / 6 : thunderbird (CESA-2014:0133)
2014-02-06 00:00:00
mageia
mageia
Updated Firefox & Thunderbird packages fix multiple security vulnerabilities
2014-02-07 00:02:09
Updated seamonkey packages fix multiple vulnerabilities
2014-02-11 00:18:15
centos
centos
firefox security update
2014-02-05 09:15:53
thunderbird security update
2014-02-05 09:18:22
oraclelinux
oraclelinux
firefox security update
2014-02-04 00:00:00
thunderbird security update
2014-02-04 00:00:00
debian
debian
[SECURITY] [DSA 2858-1] iceweasel security update
2014-02-10 15:42:08
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-02-19 00:00:00
Firefox vulnerabilities
2014-02-10 00:00:00
Firefox regression
2014-02-19 00:00:00
suse
suse
Mozilla updates February 2014 (important)
2014-02-08 13:04:12
Security update for MozillaFirefox (important)
2014-02-18 13:25:23
Security update for Mozilla Firefox (important)
2014-02-19 21:04:13
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-02-04 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-02-10 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00