CVE

Id
68850  
CVE No.
CVE-2014-1555  
Status
Candidate  
Description
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662015 68850 CVE-2014-1555 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-61.html  View
662016 68850 CVE-2014-1555 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1023121  View
662017 68850 CVE-2014-1555 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
662018 68850 CVE-2014-1555 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-0918.html  View
662019 68850 CVE-2014-1555 DEBIAN:DSA-2986  View
662020 68850 CVE-2014-1555 URL:http://www.debian.org/security/2014/dsa-2986  View
662021 68850 CVE-2014-1555 DEBIAN:DSA-2996  View
662022 68850 CVE-2014-1555 URL:http://www.debian.org/security/2014/dsa-2996  View
662023 68850 CVE-2014-1555 GENTOO:GLSA-201504-01  View
662024 68850 CVE-2014-1555 URL:https://security.gentoo.org/glsa/201504-01  View
662025 68850 CVE-2014-1555 BID:68814  View
662026 68850 CVE-2014-1555 URL:http://www.securityfocus.com/bid/68814  View
662027 68850 CVE-2014-1555 SECTRACK:1030619  View
662028 68850 CVE-2014-1555 URL:http://www.securitytracker.com/id/1030619  View
662029 68850 CVE-2014-1555 SECTRACK:1030620  View
662030 68850 CVE-2014-1555 URL:http://www.securitytracker.com/id/1030620  View
662031 68850 CVE-2014-1555 SECUNIA:59591  View
662032 68850 CVE-2014-1555 URL:http://secunia.com/advisories/59591  View
662033 68850 CVE-2014-1555 SECUNIA:59719  View
662034 68850 CVE-2014-1555 URL:http://secunia.com/advisories/59719  View
662035 68850 CVE-2014-1555 SECUNIA:59760  View
662036 68850 CVE-2014-1555 URL:http://secunia.com/advisories/59760  View
662037 68850 CVE-2014-1555 SECUNIA:60306  View
662038 68850 CVE-2014-1555 URL:http://secunia.com/advisories/60306  View
662039 68850 CVE-2014-1555 SECUNIA:60486  View
662040 68850 CVE-2014-1555 URL:http://secunia.com/advisories/60486  View
662041 68850 CVE-2014-1555 SECUNIA:60621  View
662042 68850 CVE-2014-1555 URL:http://secunia.com/advisories/60621  View
662043 68850 CVE-2014-1555 SECUNIA:60628  View
662044 68850 CVE-2014-1555 URL:http://secunia.com/advisories/60628  View
662045 68850 CVE-2014-1555 SECUNIA:60083  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15152 JVNDB-2014-004027 Mozilla Firefox および Thunderbird の mozilla::DOMSVGLength::GetTearOff 関数における任意のコードを実行される脆弱性 Mozilla Firefox および Thunderbird の mozilla::DOMSVGLength::GetTearOff 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-1563 68850 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004027.html  View