Veracode Vulnerability DatabaseVERACODE:11043Remote Code Execution (RCE)
0.013 Low
EPSS
Percentile
85.7%
firefox is vulnerable to remote code execution (RCE) attacks. The vulnerability exists through multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
References
download.novell.com/Download?buildid=VYQsgaFpQ2k
download.novell.com/Download?buildid=Y2fux-JW1Qc
lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html
lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html
lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html
lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html
lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html
osvdb.org/102864
rhn.redhat.com/errata/RHSA-2014-0132.html
rhn.redhat.com/errata/RHSA-2014-0133.html
secunia.com/advisories/56706
secunia.com/advisories/56761
secunia.com/advisories/56763
secunia.com/advisories/56767
secunia.com/advisories/56787
secunia.com/advisories/56858
secunia.com/advisories/56888
www.debian.org/security/2014/dsa-2858
www.mozilla.org/security/announce/2014/mfsa2014-01.html
www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securityfocus.com/bid/65317
www.securitytracker.com/id/1029717
www.securitytracker.com/id/1029720
www.securitytracker.com/id/1029721
www.ubuntu.com/usn/USN-2102-1
www.ubuntu.com/usn/USN-2102-2
www.ubuntu.com/usn/USN-2119-1
8pecxstudios.com/?page_id=44080
access.redhat.com/security/updates/classification/#critical
bugzilla.mozilla.org/show_bug.cgi?id=921470
bugzilla.mozilla.org/show_bug.cgi?id=925896
bugzilla.mozilla.org/show_bug.cgi?id=936808
bugzilla.mozilla.org/show_bug.cgi?id=937132
bugzilla.mozilla.org/show_bug.cgi?id=937697
bugzilla.mozilla.org/show_bug.cgi?id=945334
bugzilla.mozilla.org/show_bug.cgi?id=945939
bugzilla.mozilla.org/show_bug.cgi?id=950000
bugzilla.mozilla.org/show_bug.cgi?id=950438
bugzilla.mozilla.org/show_bug.cgi?id=951366
bugzilla.mozilla.org/show_bug.cgi?id=953114
exchange.xforce.ibmcloud.com/vulnerabilities/90899
rhn.redhat.com/errata/RHSA-2014-0132.html
security.gentoo.org/glsa/201504-01
Related
