CVE

Id
68859  
CVE No.
CVE-2014-1564  
Status
Candidate  
Description
Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662205 68859 CVE-2014-1564 BUGTRAQ:20140904 Uninit memory disclosure via truncated images in Firefox  View
662206 68859 CVE-2014-1564 URL:http://www.securityfocus.com/archive/1/archive/1/533357/100/0/threaded  View
662207 68859 CVE-2014-1564 FULLDISC:20140903 Uninit memory disclosure via truncated images in Firefox  View
662208 68859 CVE-2014-1564 URL:http://seclists.org/fulldisclosure/2014/Sep/18  View
662209 68859 CVE-2014-1564 MISC:http://packetstormsecurity.com/files/128132/Mozilla-Firefox-Secret-Leak.html  View
662210 68859 CVE-2014-1564 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-69.html  View
662211 68859 CVE-2014-1564 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1045977  View
662212 68859 CVE-2014-1564 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
662213 68859 CVE-2014-1564 GENTOO:GLSA-201504-01  View
662214 68859 CVE-2014-1564 URL:https://security.gentoo.org/glsa/201504-01  View
662215 68859 CVE-2014-1564 SUSE:openSUSE-SU-2014:1098  View
662216 68859 CVE-2014-1564 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html  View
662217 68859 CVE-2014-1564 SUSE:openSUSE-SU-2014:1099  View
662218 68859 CVE-2014-1564 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html  View
662219 68859 CVE-2014-1564 SUSE:openSUSE-SU-2015:0138  View
662220 68859 CVE-2014-1564 URL:http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html  View
662221 68859 CVE-2014-1564 SUSE:openSUSE-SU-2015:1266  View
662222 68859 CVE-2014-1564 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
662223 68859 CVE-2014-1564 BID:69525  View
662224 68859 CVE-2014-1564 URL:http://www.securityfocus.com/bid/69525  View
662225 68859 CVE-2014-1564 SECTRACK:1030793  View
662226 68859 CVE-2014-1564 URL:http://www.securitytracker.com/id/1030793  View
662227 68859 CVE-2014-1564 SECTRACK:1030794  View
662228 68859 CVE-2014-1564 URL:http://www.securitytracker.com/id/1030794  View
662229 68859 CVE-2014-1564 SECUNIA:60148  View
662230 68859 CVE-2014-1564 URL:http://secunia.com/advisories/60148  View
662231 68859 CVE-2014-1564 SECUNIA:61114  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15950 JVNDB-2014-004825 Bugzilla の token.cgi の account-creation 機能における未検証の電子メールアドレスを持つアカウントを作成される脆弱性 Bugzilla の token.cgi の account-creation 機能の confirm_create_account 関数は、realname パラメータにスカラーコンテキストを指定しないため、未検証の電子メールアドレスを持つアカウントを作成される脆弱性が存在します。 CVE-2014-1572 68859 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004825.html  View