NVD

Id
30151  
Name
CVE-2014-1525  
Description
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-30  
Modified Date
2016-12-21  
Seq
2014-1525  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159051 30151 CVE-2014-1525 FEDORA-2014-5829  View
159052 30151 CVE-2014-1525 openSUSE-SU-2014:0599  View
159053 30151 CVE-2014-1525 openSUSE-SU-2014:0629  View
159054 30151 CVE-2014-1525 http://www.mozilla.org/security/announce/2014/mfsa2014-39.html  View
159055 30151 CVE-2014-1525 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159056 30151 CVE-2014-1525 1030163  View
159057 30151 CVE-2014-1525 1030164  View
159058 30151 CVE-2014-1525 USN-2185-1  View
159059 30151 CVE-2014-1525 https://bugzilla.mozilla.org/show_bug.cgi?id=989210  View
159060 30151 CVE-2014-1525 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13440 JVNDB-2014-002315 Mozilla Firefox および SeaMonkey の mozilla::dom::TextTrack::AddCue 関数における任意のコードを実行される脆弱性 Mozilla Firefox および SeaMonkey の mozilla::dom::TextTrack::AddCue 関数は、Text Track Manager 変数のガベージコレクションを適切に操作しないため、任意のコードを実行される、またはサービス運用妨害 (解放済みメモリの使用：use-after-free およびメモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-1525 68812 CVE-2014-1525 30151 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002315.html 2014-04-29 2014-05-01 View