CVE-2014-1512

2014-03-1800:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.93 High

EPSS

Percentile

99.0%

JSON

Use-after-free vulnerability in the TypeObject class in the JavaScript
engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,
Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers
to execute arbitrary code by triggering extensive memory consumption while
garbage collection is occurring, as demonstrated by improper handling of
BumpChunk objects.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 28.0+build2-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 28.0+build2-0ubuntu0.12.10.1UNKNOWN
ubuntu13.10noarchfirefox< 28.0+build2-0ubuntu0.13.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 1:24.4.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 1:24.4.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.10noarchthunderbird< 1:24.4.0+build1-0ubuntu0.13.10.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 28.0+build2-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 28.0+build2-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.10	noarch	firefox	< 28.0+build2-0ubuntu0.13.10.1	UNKNOWN
ubuntu	12.04	noarch	thunderbird	< 1:24.4.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	thunderbird	< 1:24.4.0+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.10	noarch	thunderbird	< 1:24.4.0+build1-0ubuntu0.13.10.2	UNKNOWN