NVD

Id
30111  
Name
CVE-2014-1482  
Description
RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect write operations) via crafted image data, as demonstrated by Goo Create.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-02-06  
Modified Date
2016-12-21  
Seq
2014-1482  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158555 30111 CVE-2014-1482 FEDORA-2014-2041  View
158556 30111 CVE-2014-1482 FEDORA-2014-2083  View
158557 30111 CVE-2014-1482 openSUSE-SU-2014:0212  View
158558 30111 CVE-2014-1482 openSUSE-SU-2014:0213  View
158559 30111 CVE-2014-1482 SUSE-SU-2014:0248  View
158560 30111 CVE-2014-1482 openSUSE-SU-2014:0419  View
158561 30111 CVE-2014-1482 RHSA-2014:0132  View
158562 30111 CVE-2014-1482 RHSA-2014:0133  View
158563 30111 CVE-2014-1482 DSA-2858  View
158564 30111 CVE-2014-1482 http://www.mozilla.org/security/announce/2014/mfsa2014-04.html  View
158565 30111 CVE-2014-1482 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
158566 30111 CVE-2014-1482 USN-2102-1  View
158567 30111 CVE-2014-1482 USN-2102-2  View
158568 30111 CVE-2014-1482 USN-2119-1  View
158569 30111 CVE-2014-1482 https://8pecxstudios.com/?page_id=44080  View
158570 30111 CVE-2014-1482 https://bugzilla.mozilla.org/show_bug.cgi?id=943803  View
158571 30111 CVE-2014-1482 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12448 JVNDB-2014-001323 複数の Mozilla 製品の RasterImage.cpp における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の RasterImage.cpp は、破棄されたデータへのアクセスを適切に制限しないため、任意のコードを実行される、またはサービス運用妨害 (不正な書き込み操作) 状態にされる脆弱性が存在します。 CVE-2014-1482 68769 CVE-2014-1482 30111 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001323.html 2014-02-04 2014-02-25 View