CVE

Id
68858  
CVE No.
CVE-2014-1563  
Status
Candidate  
Description
Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662183 68858 CVE-2014-1563 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-68.html  View
662184 68858 CVE-2014-1563 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1018524  View
662185 68858 CVE-2014-1563 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
662186 68858 CVE-2014-1563 GENTOO:GLSA-201504-01  View
662187 68858 CVE-2014-1563 URL:https://security.gentoo.org/glsa/201504-01  View
662188 68858 CVE-2014-1563 SUSE:openSUSE-SU-2014:1098  View
662189 68858 CVE-2014-1563 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html  View
662190 68858 CVE-2014-1563 SUSE:openSUSE-SU-2014:1099  View
662191 68858 CVE-2014-1563 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html  View
662192 68858 CVE-2014-1563 SUSE:openSUSE-SU-2015:0138  View
662193 68858 CVE-2014-1563 URL:http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html  View
662194 68858 CVE-2014-1563 SUSE:openSUSE-SU-2015:1266  View
662195 68858 CVE-2014-1563 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
662196 68858 CVE-2014-1563 BID:69523  View
662197 68858 CVE-2014-1563 URL:http://www.securityfocus.com/bid/69523  View
662198 68858 CVE-2014-1563 SECTRACK:1030793  View
662199 68858 CVE-2014-1563 URL:http://www.securitytracker.com/id/1030793  View
662200 68858 CVE-2014-1563 SECTRACK:1030794  View
662201 68858 CVE-2014-1563 URL:http://www.securitytracker.com/id/1030794  View
662202 68858 CVE-2014-1563 SECUNIA:60148  View
662203 68858 CVE-2014-1563 URL:http://secunia.com/advisories/60148  View
662204 68858 CVE-2014-1563 SECUNIA:61114  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15949 JVNDB-2014-004824 Bugzilla における重要な private-comment 情報を取得される脆弱性 Bugzilla には、Bug.pm、Flag.pm、およびメールテンプレートに関する処理に不備があるため、重要な private-comment 情報を取得される脆弱性が存在します。 CVE-2014-1571 68858 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004824.html  View