CVE

Id
68846  
CVE No.
CVE-2014-1551  
Status
Candidate  
Description
Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
661942 68846 CVE-2014-1551 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-59.html  View
661943 68846 CVE-2014-1551 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1018234  View
661944 68846 CVE-2014-1551 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
661945 68846 CVE-2014-1551 GENTOO:GLSA-201504-01  View
661946 68846 CVE-2014-1551 URL:https://security.gentoo.org/glsa/201504-01  View
661947 68846 CVE-2014-1551 SECTRACK:1030619  View
661948 68846 CVE-2014-1551 URL:http://www.securitytracker.com/id/1030619  View
661949 68846 CVE-2014-1551 SECTRACK:1030620  View
661950 68846 CVE-2014-1551 URL:http://www.securitytracker.com/id/1030620  View
661951 68846 CVE-2014-1551 SECUNIA:59760  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14663 JVNDB-2014-003538 Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox および Thunderbird には、サービス運用妨害 (X.509 証明書の構文解析停止) 状態にされる脆弱性が存在します。 CVE-2014-1559 68846 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003538.html  View