CVE

Id
68827  
CVE No.
CVE-2014-1532  
Status
Candidate  
Description
Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
661402 68827 CVE-2014-1532 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-46.html  View
661403 68827 CVE-2014-1532 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=966006  View
661404 68827 CVE-2014-1532 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
661405 68827 CVE-2014-1532 DEBIAN:DSA-2918  View
661406 68827 CVE-2014-1532 URL:http://www.debian.org/security/2014/dsa-2918  View
661407 68827 CVE-2014-1532 DEBIAN:DSA-2924  View
661408 68827 CVE-2014-1532 URL:http://www.debian.org/security/2014/dsa-2924  View
661409 68827 CVE-2014-1532 FEDORA:FEDORA-2014-5829  View
661410 68827 CVE-2014-1532 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html  View
661411 68827 CVE-2014-1532 FEDORA:FEDORA-2014-5833  View
661412 68827 CVE-2014-1532 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html  View
661413 68827 CVE-2014-1532 GENTOO:GLSA-201504-01  View
661414 68827 CVE-2014-1532 URL:https://security.gentoo.org/glsa/201504-01  View
661415 68827 CVE-2014-1532 REDHAT:RHSA-2014:0448  View
661416 68827 CVE-2014-1532 URL:http://rhn.redhat.com/errata/RHSA-2014-0448.html  View
661417 68827 CVE-2014-1532 REDHAT:RHSA-2014:0449  View
661418 68827 CVE-2014-1532 URL:http://rhn.redhat.com/errata/RHSA-2014-0449.html  View
661419 68827 CVE-2014-1532 SUSE:SUSE-SU-2014:0665  View
661420 68827 CVE-2014-1532 URL:http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html  View
661421 68827 CVE-2014-1532 SUSE:openSUSE-SU-2014:0602  View
661422 68827 CVE-2014-1532 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html  View
661423 68827 CVE-2014-1532 SUSE:openSUSE-SU-2014:0640  View
661424 68827 CVE-2014-1532 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html  View
661425 68827 CVE-2014-1532 SUSE:openSUSE-SU-2014:0599  View
661426 68827 CVE-2014-1532 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html  View
661427 68827 CVE-2014-1532 SUSE:openSUSE-SU-2014:0629  View
661428 68827 CVE-2014-1532 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html  View
661429 68827 CVE-2014-1532 SUSE:SUSE-SU-2014:0727  View
661430 68827 CVE-2014-1532 URL:http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html  View
661431 68827 CVE-2014-1532 UBUNTU:USN-2189-1  View
661432 68827 CVE-2014-1532 URL:http://www.ubuntu.com/usn/USN-2189-1  View
661433 68827 CVE-2014-1532 UBUNTU:USN-2185-1  View
661434 68827 CVE-2014-1532 URL:http://www.ubuntu.com/usn/USN-2185-1  View
661435 68827 CVE-2014-1532 BID:67130  View
661436 68827 CVE-2014-1532 URL:http://www.securityfocus.com/bid/67130  View
661437 68827 CVE-2014-1532 SECTRACK:1030163  View
661438 68827 CVE-2014-1532 URL:http://www.securitytracker.com/id/1030163  View
661439 68827 CVE-2014-1532 SECTRACK:1030164  View
661440 68827 CVE-2014-1532 URL:http://www.securitytracker.com/id/1030164  View
661441 68827 CVE-2014-1532 SECTRACK:1030165  View
661442 68827 CVE-2014-1532 URL:http://www.securitytracker.com/id/1030165  View
661443 68827 CVE-2014-1532 SECUNIA:59866  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13966 JVNDB-2014-002841 Mozilla Firefox の Event Listener Manager における任意のコードを実行される脆弱性 Mozilla Firefox の Event Listener Manager の nsEventListenerManager::CompileEventHandlerInternal 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-1540 68827 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002841.html  View