Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:15253
HistoryMay 02, 2019 - 4:58 a.m.

Use-After-Free

2019-05-0204:58:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1533, CVE-2014-1538, CVE-2014-1541) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Abhishek Arya, and Nils as the original reporters of these issues. For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 24.6.0 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. All Firefox users should upgrade to these updated packages, which contain Firefox version 24.6.0 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

References

Related

openvas 35
veracode 2
nessus 28
centos 2
mageia 2
oraclelinux 2
ubuntu 2
redhat 2
osv 2
debian 2
suse 6
prion 3
cve 3
ubuntucve 3
mozilla 3
ibm 2
securityvulns 2
freebsd 1
gentoo 1
openvas
openvas
Ubuntu: Security Advisory (USN-2250-1)
2014-06-23 00:00:00
CentOS Update for thunderbird CESA-2014:0742 centos6
2014-06-17 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Jul 2014) - Windows
2014-07-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:58:34
Remote Code Execution (RCE)
2019-01-15 08:53:46
nessus
nessus
CentOS 5 / 6 : firefox (CESA-2014:0741)
2014-06-12 00:00:00
Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2250-1)
2014-06-20 00:00:00
Firefox ESR 24.x < 24.6 Multiple Vulnerabilities
2014-06-11 00:00:00
centos
centos
firefox security update
2014-06-11 10:49:01
thunderbird security update
2014-06-11 10:54:29
mageia
mageia
Updated firefox & thunderbird packages fix multiple security vulnerabilities
2014-06-11 21:13:59
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
oraclelinux
oraclelinux
firefox security update
2014-06-10 00:00:00
thunderbird security update
2014-06-10 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-06-19 00:00:00
Firefox vulnerabilities
2014-06-11 00:00:00
redhat
redhat
(RHSA-2014:0741) Critical: firefox security update
2014-06-10 00:00:00
(RHSA-2014:0742) Important: thunderbird security update
2014-06-10 00:00:00
osv
osv
iceweasel - security update
2014-06-11 00:00:00
icedove - security update
2014-06-16 00:00:00
debian
debian
[SECURITY] [DSA 2955-1] iceweasel security update
2014-06-11 14:33:41
[SECURITY] [DSA 2960-1] icedove security update
2014-06-16 17:13:24
suse
suse
Mozilla updates 2014/06 (critical)
2014-06-16 08:04:13
Security update for MozillaFirefox (important)
2014-06-21 01:04:47
Security update for MozillaFirefox (important)
2014-06-25 00:04:17
prion
prion
Memory corruption
2014-06-11 10:57:00
Design/Logic Flaw
2014-06-11 10:57:00
Design/Logic Flaw
2014-06-11 10:57:00
cve
cve
CVE-2014-1538
2014-06-11 10:57:00
CVE-2014-1533
2014-06-11 10:57:00
CVE-2014-1541
2014-06-11 10:57:00
ubuntucve
ubuntucve
CVE-2014-1533
2014-06-11 00:00:00
CVE-2014-1541
2014-06-11 00:00:00
CVE-2014-1538
2014-06-11 00:00:00
mozilla
mozilla
Use-after-free with SMIL Animation Controller — Mozilla
2014-06-10 00:00:00
Miscellaneous memory safety hazards (rv:30.0 / rv:24.6) — Mozilla
2014-06-10 00:00:00
Use-after-free and out of bounds issues found using Address Sanitizer — Mozilla
2014-06-10 00:00:00
ibm
ibm
Security Bulletin: Mozilla firefox vulnerability issues on IBM SONAS (CVE-2014-1518, CVE-2014-1523, CVE-2014-1524, CVE-2014-1529, CVE-2014-1530, CVE-2014-1531, CVE-2014-1532, CVE-2014-1533, CVE-2014-1538, CVE-2014-1541)
2018-06-18 00:08:33
Security Bulletin: IBM Storwize V7000 Unified security vulnerabilities related to Mozilla Firefox (CVE-2014-1518, CVE-2014-1523, CVE-2014-1524, CVE-2014-1529, CVE-2014-1530, CVE-2014-1531, CVE-2014-1532, CVE-2014-1533, CVE-2014-1538, CVE-2014-1541)
2018-06-18 00:08:28
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-06-13 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-06-10 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON
Related for VERACODE:15253
openvas35veracode2nessus28centos2mageia2oraclelinux2ubuntu2redhat2osv2debian2suse6prion3cve3ubuntucve3mozilla3ibm2securityvulns2freebsd1gentoo1