CVE

Id
68826  
CVE No.
CVE-2014-1531  
Status
Candidate  
Description
Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
661360 68826 CVE-2014-1531 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-44.html  View
661361 68826 CVE-2014-1531 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=987140  View
661362 68826 CVE-2014-1531 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
661363 68826 CVE-2014-1531 DEBIAN:DSA-2918  View
661364 68826 CVE-2014-1531 URL:http://www.debian.org/security/2014/dsa-2918  View
661365 68826 CVE-2014-1531 DEBIAN:DSA-2924  View
661366 68826 CVE-2014-1531 URL:http://www.debian.org/security/2014/dsa-2924  View
661367 68826 CVE-2014-1531 FEDORA:FEDORA-2014-5829  View
661368 68826 CVE-2014-1531 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html  View
661369 68826 CVE-2014-1531 FEDORA:FEDORA-2014-5833  View
661370 68826 CVE-2014-1531 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html  View
661371 68826 CVE-2014-1531 GENTOO:GLSA-201504-01  View
661372 68826 CVE-2014-1531 URL:https://security.gentoo.org/glsa/201504-01  View
661373 68826 CVE-2014-1531 REDHAT:RHSA-2014:0448  View
661374 68826 CVE-2014-1531 URL:http://rhn.redhat.com/errata/RHSA-2014-0448.html  View
661375 68826 CVE-2014-1531 REDHAT:RHSA-2014:0449  View
661376 68826 CVE-2014-1531 URL:http://rhn.redhat.com/errata/RHSA-2014-0449.html  View
661377 68826 CVE-2014-1531 SUSE:SUSE-SU-2014:0665  View
661378 68826 CVE-2014-1531 URL:http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html  View
661379 68826 CVE-2014-1531 SUSE:openSUSE-SU-2014:0602  View
661380 68826 CVE-2014-1531 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html  View
661381 68826 CVE-2014-1531 SUSE:openSUSE-SU-2014:0640  View
661382 68826 CVE-2014-1531 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html  View
661383 68826 CVE-2014-1531 SUSE:openSUSE-SU-2014:0599  View
661384 68826 CVE-2014-1531 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html  View
661385 68826 CVE-2014-1531 SUSE:openSUSE-SU-2014:0629  View
661386 68826 CVE-2014-1531 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html  View
661387 68826 CVE-2014-1531 SUSE:SUSE-SU-2014:0727  View
661388 68826 CVE-2014-1531 URL:http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html  View
661389 68826 CVE-2014-1531 UBUNTU:USN-2189-1  View
661390 68826 CVE-2014-1531 URL:http://www.ubuntu.com/usn/USN-2189-1  View
661391 68826 CVE-2014-1531 UBUNTU:USN-2185-1  View
661392 68826 CVE-2014-1531 URL:http://www.ubuntu.com/usn/USN-2185-1  View
661393 68826 CVE-2014-1531 BID:67134  View
661394 68826 CVE-2014-1531 URL:http://www.securityfocus.com/bid/67134  View
661395 68826 CVE-2014-1531 SECTRACK:1030163  View
661396 68826 CVE-2014-1531 URL:http://www.securitytracker.com/id/1030163  View
661397 68826 CVE-2014-1531 SECTRACK:1030164  View
661398 68826 CVE-2014-1531 URL:http://www.securitytracker.com/id/1030164  View
661399 68826 CVE-2014-1531 SECTRACK:1030165  View
661400 68826 CVE-2014-1531 URL:http://www.securitytracker.com/id/1030165  View
661401 68826 CVE-2014-1531 SECUNIA:59866  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13965 JVNDB-2014-002840 OS X 上で稼働する Mozilla Firefox および Thunderbird におけるクリックジャッキング攻撃を実行される脆弱性 OS X 上で稼働する Mozilla Firefox および Thunderbird は、フラッシュオブジェクトと DIV 要素との相互作用の後にカーソルの可視性が保障されないため、クリックジャッキング攻撃を実行される脆弱性が存在します。 CVE-2014-1539 68826 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002840.html  View