NVD

Id
30215  
Name
CVE-2014-1592  
Description
Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-11  
Modified Date
2016-12-23  
Seq
2014-1592  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159968 30215 CVE-2014-1592 openSUSE-SU-2015:0138  View
159969 30215 CVE-2014-1592 openSUSE-SU-2015:1266  View
159970 30215 CVE-2014-1592 DSA-3090  View
159971 30215 CVE-2014-1592 DSA-3092  View
159972 30215 CVE-2014-1592 http://www.mozilla.org/security/announce/2014/mfsa2014-87.html  View
159973 30215 CVE-2014-1592 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
159974 30215 CVE-2014-1592 71398  View
159975 30215 CVE-2014-1592 https://bugzilla.mozilla.org/show_bug.cgi?id=1088635  View
159976 30215 CVE-2014-1592 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17027 JVNDB-2014-005902 複数の Mozilla 製品の xul.dll の nsHtml5TreeOperation 関数における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の xul.dll の nsHtml5TreeOperation 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2014-1592 68879 CVE-2014-1592 30215 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005902.html 2014-12-02 2014-12-12 View