Lucene search
Ubuntu.comUB:CVE-2014-1594HistoryDec 02, 2014 - 12:00 a.m.
CVE-2014-1594
2014-12-0200:00:00
ubuntu.com
ubuntu.com
7
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.057 Low
EPSS
Percentile
93.3%
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird
before 31.3, and SeaMonkey before 2.31 might allow remote attackers to
execute arbitrary code by leveraging an incorrect cast from the
BasicThebesLayer data type to the BasicContainerLayer data type.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | firefox | < 34.0+build2-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | firefox | < 34.0+build2-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | firefox | < 34.0+build2-0ubuntu0.14.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 1:31.3.0+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | thunderbird | < 1:31.3.0+build1-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | thunderbird | < 1:31.3.0+build1-0ubuntu0.14.10.1 | UNKNOWN |
References
Related
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-89) - Linux
2021-11-11 00:00:00
Oracle: Security Advisory (ELSA-2014-1924)
2015-10-06 00:00:00
Debian Security Advisory DSA 3092-1 (icedove - security update)
2014-12-07 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:05:37
cve
cve
CVE-2014-1594
2014-12-11 11:59:00
mozilla
mozilla
Bad casting from the BasicThebesLayer to BasicContainerLayer — Mozilla
2014-12-02 00:00:00
prion
prion
Code injection
2014-12-11 11:59:00
nessus
nessus
RHEL 5 / 6 : thunderbird (RHSA-2014:1924)
2014-12-03 00:00:00
Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2428-1)
2014-12-04 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:1654-1)
2014-12-18 00:00:00
debian
debian
[SECURITY] [DSA 3090-1] iceweasel security update
2014-12-04 15:30:29
[SECURITY] [DSA 3092-1] icedove security update
2014-12-07 19:07:31
osv
osv
iceweasel - security update
2014-12-04 00:00:00
icedove - security update
2014-12-07 00:00:00
redhat
redhat
(RHSA-2014:1919) Critical: firefox security update
2014-12-02 00:00:00
(RHSA-2014:1924) Important: thunderbird security update
2014-12-02 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-12-03 00:00:00
Firefox vulnerabilities
2014-12-02 00:00:00
centos
centos
firefox security update
2014-12-03 22:51:38
thunderbird security update
2014-12-03 22:57:24
oraclelinux
oraclelinux
firefox security update
2014-12-03 00:00:00
thunderbird security update
2014-12-02 00:00:00
mageia
mageia
Updated firefox & thunderbird packages fix security vulnerabilities
2014-12-03 22:27:32
Updated iceape package fixes security vulnerabilities
2014-12-09 23:12:41
suse
suse
Security update for Mozilla Firefox (important)
2014-12-12 03:05:16
Firefox update to latest 31ESR release (important)
2015-01-25 16:04:59
Mozilla (Firefox/Thunderbird) updates to 31.8.0 (important)
2015-07-18 19:07:56
archlinux
archlinux
firefox: multiple issues
2014-12-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-12-01 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-12-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.057 Low
EPSS
Percentile
93.3%
Related for UB:CVE-2014-1594