NVD

Id
30165  
Name
CVE-2014-1540  
Description
Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-06-11  
Modified Date
2017-01-06  
Seq
2014-1540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159265 30165 CVE-2014-1540 openSUSE-SU-2014:0855  View
159266 30165 CVE-2014-1540 59486  View
159267 30165 CVE-2014-1540 http://www.mozilla.org/security/announce/2014/mfsa2014-51.html  View
159268 30165 CVE-2014-1540 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159269 30165 CVE-2014-1540 67978  View
159270 30165 CVE-2014-1540 1030388  View
159271 30165 CVE-2014-1540 https://bugzilla.mozilla.org/show_bug.cgi?id=978862  View
159272 30165 CVE-2014-1540 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13966 JVNDB-2014-002841 Mozilla Firefox の Event Listener Manager における任意のコードを実行される脆弱性 Mozilla Firefox の Event Listener Manager の nsEventListenerManager::CompileEventHandlerInternal 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-1540 68827 CVE-2014-1540 30165 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002841.html 2014-06-10 2014-06-12 View