CVE

Id
68809  
CVE No.
CVE-2014-1514  
Status
Candidate  
Description
vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
660995 68809 CVE-2014-1514 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-32.html  View
660996 68809 CVE-2014-1514 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=983344  View
660997 68809 CVE-2014-1514 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
660998 68809 CVE-2014-1514 DEBIAN:DSA-2881  View
660999 68809 CVE-2014-1514 URL:http://www.debian.org/security/2014/dsa-2881  View
661000 68809 CVE-2014-1514 GENTOO:GLSA-201504-01  View
661001 68809 CVE-2014-1514 URL:https://security.gentoo.org/glsa/201504-01  View
661002 68809 CVE-2014-1514 REDHAT:RHSA-2014:0310  View
661003 68809 CVE-2014-1514 URL:http://rhn.redhat.com/errata/RHSA-2014-0310.html  View
661004 68809 CVE-2014-1514 REDHAT:RHSA-2014:0316  View
661005 68809 CVE-2014-1514 URL:http://rhn.redhat.com/errata/RHSA-2014-0316.html  View
661006 68809 CVE-2014-1514 SUSE:SUSE-SU-2014:0418  View
661007 68809 CVE-2014-1514 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html  View
661008 68809 CVE-2014-1514 SUSE:openSUSE-SU-2014:0419  View
661009 68809 CVE-2014-1514 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html  View
661010 68809 CVE-2014-1514 SUSE:openSUSE-SU-2014:0448  View
661011 68809 CVE-2014-1514 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html  View
661012 68809 CVE-2014-1514 SUSE:openSUSE-SU-2014:0584  View
661013 68809 CVE-2014-1514 URL:http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html  View
661014 68809 CVE-2014-1514 UBUNTU:USN-2151-1  View
661015 68809 CVE-2014-1514 URL:http://www.ubuntu.com/usn/USN-2151-1  View
661016 68809 CVE-2014-1514 BID:66240  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13437 JVNDB-2014-002312 Mozilla Firefox および SeaMonkey の Web Audio サブシステムの mozilla::dom::OscillatorNodeEngine::ComputeCustom 関数における任意のコードを実行される脆弱性 Mozilla Firefox および SeaMonkey の Web Audio サブシステムの mozilla::dom::OscillatorNodeEngine::ComputeCustom 関数 には、任意のコードを実行される、またはサービス運用妨害 (out-of-bounds read、メモリ破損、およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-1522 68809 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002312.html  View