NVD

Id
30139  
Name
CVE-2014-1512  
Description
Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-03-19  
Modified Date
2016-12-21  
Seq
2014-1512  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158891 30139 CVE-2014-1512 20140326 VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free (Pwn2Own)  View
158892 30139 CVE-2014-1512 SUSE-SU-2014:0418  View
158893 30139 CVE-2014-1512 openSUSE-SU-2014:0419  View
158894 30139 CVE-2014-1512 openSUSE-SU-2014:0448  View
158895 30139 CVE-2014-1512 openSUSE-SU-2014:0584  View
158896 30139 CVE-2014-1512 RHSA-2014:0310  View
158897 30139 CVE-2014-1512 RHSA-2014:0316  View
158898 30139 CVE-2014-1512 DSA-2881  View
158899 30139 CVE-2014-1512 http://www.mozilla.org/security/announce/2014/mfsa2014-30.html  View
158900 30139 CVE-2014-1512 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
158901 30139 CVE-2014-1512 66209  View
158902 30139 CVE-2014-1512 USN-2151-1  View
158903 30139 CVE-2014-1512 https://bugzilla.mozilla.org/show_bug.cgi?id=982957  View
158904 30139 CVE-2014-1512 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12861 JVNDB-2014-001736 複数の Mozilla 製品の JavaScript エンジンの TypeObject クラスにおける任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の JavaScript エンジンの TypeObject クラスには、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2014-1512 68799 CVE-2014-1512 30139 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001736.html 2014-03-18 2014-04-08 View