NVD

Id
30150  
Name
CVE-2014-1524  
Description
The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-30  
Modified Date
2017-01-06  
Seq
2014-1524  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159029 30150 CVE-2014-1524 FEDORA-2014-5833  View
159030 30150 CVE-2014-1524 FEDORA-2014-5829  View
159031 30150 CVE-2014-1524 SUSE-SU-2014:0665  View
159032 30150 CVE-2014-1524 SUSE-SU-2014:0727  View
159033 30150 CVE-2014-1524 openSUSE-SU-2014:0599  View
159034 30150 CVE-2014-1524 openSUSE-SU-2014:0602  View
159035 30150 CVE-2014-1524 openSUSE-SU-2014:0629  View
159036 30150 CVE-2014-1524 openSUSE-SU-2014:0640  View
159037 30150 CVE-2014-1524 RHSA-2014:0448  View
159038 30150 CVE-2014-1524 RHSA-2014:0449  View
159039 30150 CVE-2014-1524 DSA-2918  View
159040 30150 CVE-2014-1524 DSA-2924  View
159041 30150 CVE-2014-1524 http://www.mozilla.org/security/announce/2014/mfsa2014-38.html  View
159042 30150 CVE-2014-1524 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159043 30150 CVE-2014-1524 67131  View
159044 30150 CVE-2014-1524 1030163  View
159045 30150 CVE-2014-1524 1030164  View
159046 30150 CVE-2014-1524 1030165  View
159047 30150 CVE-2014-1524 USN-2185-1  View
159048 30150 CVE-2014-1524 USN-2189-1  View
159049 30150 CVE-2014-1524 https://bugzilla.mozilla.org/show_bug.cgi?id=989183  View
159050 30150 CVE-2014-1524 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13439 JVNDB-2014-002314 複数の Mozilla 製品の nsXBLProtoImpl::InstallImplementation 関数における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsXBLProtoImpl::InstallImplementation 関数には、オブジェクトが XBL オブジェクトかどうかを適切にチェックしないため、任意のコードを実行される、またはサービス運用妨害 (バッファオーバーフロー) 状態にされる脆弱性が存在します。 CVE-2014-1524 68811 CVE-2014-1524 30150 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002314.html 2014-04-29 2014-05-27 View