Lucene search
Ubuntu.comUB:CVE-2014-1576HistoryOct 14, 2014 - 12:00 a.m.
CVE-2014-1576
2014-10-1400:00:00
ubuntu.com
ubuntu.com
12
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.204 Low
EPSS
Percentile
96.4%
Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla
Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x
before 31.2 allows remote attackers to execute arbitrary code via Cascading
Style Sheets (CSS) token sequences that trigger changes to capitalization
style.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | firefox | < 33.0+build2-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | firefox | < 33.0+build2-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 1:31.2.0+build2-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | thunderbird | < 1:31.2.0+build2-0ubuntu0.14.04.1 | UNKNOWN |
References
Related
cvelist
cvelist
CVE-2014-1576
2014-10-15 10:00:00
cve
cve
CVE-2014-1576
2014-10-15 10:55:06
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-75) - Linux
2021-11-11 00:00:00
CentOS Update for firefox CESA-2014:1635 centos7
2014-10-16 00:00:00
Oracle: Security Advisory (ELSA-2014-1635)
2015-10-06 00:00:00
nvd
nvd
CVE-2014-1576
2014-10-15 10:55:06
prion
prion
Heap overflow
2014-10-15 10:55:00
mozilla
mozilla
Buffer overflow during CSS manipulation — Mozilla
2014-10-14 00:00:00
oraclelinux
oraclelinux
firefox security update
2014-10-15 00:00:00
veracode
veracode
Out-Of-Bounds Write
2019-05-02 05:12:55
Use-After-Free
2019-05-02 05:12:55
Out-Of-Bounds Read
2019-05-02 05:12:55
nessus
nessus
CentOS 5 / 6 / 7 : firefox (CESA-2014:1635)
2014-10-16 00:00:00
Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20141015)
2014-11-04 00:00:00
RHEL 5 / 6 / 7 : firefox (RHSA-2014:1635)
2014-10-15 00:00:00
centos
centos
firefox, xulrunner security update
2014-10-15 12:07:15
redhat
redhat
(RHSA-2014:1635) Critical: firefox security update
2014-10-14 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-10-15 00:00:00
Firefox vulnerabilities
2014-10-14 00:00:00
mageia
mageia
Updated firefox and thunderbird packages fix security vulnerabilities
2014-10-26 00:23:09
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
osv
osv
icedove - security update
2014-10-31 00:00:00
iceweasel - security update
2014-10-15 00:00:00
debian
debian
[SECURITY] [DSA 3050-3] iceweasel security update
2014-11-12 20:46:04
[SECURITY] [DSA 3050-3] iceweasel security update
2014-11-12 20:46:04
[SECURITY] [DSA 3050-2] xulrunner update
2014-10-28 17:28:03
suse
suse
Security update for MozillaFirefox (important)
2014-11-11 00:04:48
Security update for MozillaFirefox (important)
2014-11-20 01:04:52
Security update for MozillaFirefox (important)
2014-11-21 19:05:03
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-10-14 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-10-15 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.204 Low
EPSS
Percentile
96.4%
Related for UB:CVE-2014-1576