Veracode Vulnerability DatabaseVERACODE:11105Arbitrary Code Execution
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
firefox is vulnerable to arbitrary code execution attacks. The vulnerability exists as multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
References
linux.oracle.com/errata/ELSA-2014-0918.html
secunia.com/advisories/59591
secunia.com/advisories/59719
secunia.com/advisories/59760
secunia.com/advisories/60083
secunia.com/advisories/60306
secunia.com/advisories/60486
secunia.com/advisories/60621
secunia.com/advisories/60628
www.debian.org/security/2014/dsa-2986
www.debian.org/security/2014/dsa-2996
www.mozilla.org/security/announce/2014/mfsa2014-56.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securityfocus.com/bid/68811
www.securitytracker.com/id/1030619
www.securitytracker.com/id/1030620
access.redhat.com/security/updates/classification/#important
bugzilla.mozilla.org/show_bug.cgi?id=1012694
bugzilla.mozilla.org/show_bug.cgi?id=1019684
bugzilla.mozilla.org/show_bug.cgi?id=1024765
bugzilla.mozilla.org/show_bug.cgi?id=985070
rhn.redhat.com/errata/RHSA-2014-0918.html
security.gentoo.org/glsa/201504-01
www.mozilla.org/security/known-vulnerabilities/thunderbird.html#thunderbird24.7
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C