NVD

Id
30202  
Name
CVE-2014-1578  
Description
The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-15  
Modified Date
2016-12-23  
Seq
2014-1578  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159794 30202 CVE-2014-1578 FEDORA-2014-14084  View
159795 30202 CVE-2014-1578 FEDORA-2014-13042  View
159796 30202 CVE-2014-1578 openSUSE-SU-2015:0138  View
159797 30202 CVE-2014-1578 openSUSE-SU-2015:1266  View
159798 30202 CVE-2014-1578 openSUSE-SU-2014:1343  View
159799 30202 CVE-2014-1578 openSUSE-SU-2014:1344  View
159800 30202 CVE-2014-1578 openSUSE-SU-2014:1345  View
159801 30202 CVE-2014-1578 openSUSE-SU-2014:1346  View
159802 30202 CVE-2014-1578 RHSA-2014:1635  View
159803 30202 CVE-2014-1578 RHSA-2014:1647  View
159804 30202 CVE-2014-1578 DSA-3050  View
159805 30202 CVE-2014-1578 DSA-3061  View
159806 30202 CVE-2014-1578 http://www.mozilla.org/security/announce/2014/mfsa2014-77.html  View
159807 30202 CVE-2014-1578 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
159808 30202 CVE-2014-1578 70428  View
159809 30202 CVE-2014-1578 1031028  View
159810 30202 CVE-2014-1578 1031030  View
159811 30202 CVE-2014-1578 USN-2372-1  View
159812 30202 CVE-2014-1578 USN-2373-1  View
159813 30202 CVE-2014-1578 https://advisories.mageia.org/MGASA-2014-0421.html  View
159814 30202 CVE-2014-1578 https://bugzilla.mozilla.org/show_bug.cgi?id=1063327  View
159815 30202 CVE-2014-1578 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16016 JVNDB-2014-004891 Mozilla Firefox および Thunderbird の get_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox および Thunderbird の get_tile 関数には、サービス運用妨害 (out-of-bounds write およびアプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-1578 68865 CVE-2014-1578 30202 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004891.html 2014-10-14 2014-11-28 View