Lucene search
Ubuntu.comUB:CVE-2014-1592HistoryDec 02, 2014 - 12:00 a.m.
CVE-2014-1592
2014-12-0200:00:00
ubuntu.com
ubuntu.com
11
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.063 Low
EPSS
Percentile
93.6%
Use-after-free vulnerability in the nsHtml5TreeOperation function in
xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3,
Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers
to execute arbitrary code by adding a second root element to an HTML5
document during parsing.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | firefox | < 34.0+build2-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | firefox | < 34.0+build2-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | firefox | < 34.0+build2-0ubuntu0.14.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 1:31.3.0+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | thunderbird | < 1:31.3.0+build1-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | thunderbird | < 1:31.3.0+build1-0ubuntu0.14.10.1 | UNKNOWN |
References
Related
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:05:37
cve
cve
CVE-2014-1592
2014-12-11 11:59:00
prion
prion
Design/Logic Flaw
2014-12-11 11:59:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-87) - Linux
2021-11-11 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Dec 2014) - Windows
2014-12-16 00:00:00
Debian Security Advisory DSA 3090-1 (iceweasel - security update)
2014-12-04 00:00:00
mozilla
mozilla
Use-after-free during HTML5 parsing — Mozilla
2014-12-02 00:00:00
nessus
nessus
CentOS 5 / 6 / 7 : firefox (CESA-2014:1919)
2014-12-04 00:00:00
Debian DSA-3092-1 : icedove - security update
2014-12-09 00:00:00
redhat
redhat
(RHSA-2014:1924) Important: thunderbird security update
2014-12-02 00:00:00
(RHSA-2014:1919) Critical: firefox security update
2014-12-02 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2014-12-02 00:00:00
firefox security update
2014-12-03 00:00:00
debian
debian
[SECURITY] [DSA 3092-1] icedove security update
2014-12-07 19:07:31
[SECURITY] [DSA 3090-1] iceweasel security update
2014-12-04 15:30:29
osv
osv
iceweasel - security update
2014-12-04 00:00:00
icedove - security update
2014-12-07 00:00:00
centos
centos
thunderbird security update
2014-12-03 22:57:24
firefox security update
2014-12-03 22:51:38
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-12-03 00:00:00
Firefox vulnerabilities
2014-12-02 00:00:00
mageia
mageia
Updated firefox & thunderbird packages fix security vulnerabilities
2014-12-03 22:27:32
Updated iceape package fixes security vulnerabilities
2014-12-09 23:12:41
suse
suse
Security update for Mozilla Firefox (important)
2014-12-12 03:05:16
Firefox update to latest 31ESR release (important)
2015-01-25 16:04:59
Mozilla (Firefox/Thunderbird) updates to 31.8.0 (important)
2015-07-18 19:07:56
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-12-01 00:00:00
archlinux
archlinux
firefox: multiple issues
2014-12-03 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-12-08 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.063 Low
EPSS
Percentile
93.6%
Related for UB:CVE-2014-1592