9.8

CVE-2014-1477

Exploit

EPSS 0.85%
Published 06.02.2014 05:44:24
Last modified 11.04.2025 00:51:21
Source security@mozilla.org
Teams watchlist Login
Open Login

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected products Warnungen 0 Metrics 3 CWE 0 References 45

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 27.0

Mozilla ≫ Firefox ESR Version >= 24.0 < 24.3

Mozilla ≫ Seamonkey Version < 2.24

Mozilla ≫ Thunderbird Version < 24.3

Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version12.10

Canonical ≫ Ubuntu Linux Version13.10

Debian ≫ Debian Linux Version7.0

Redhat ≫ Enterprise Linux Desktop Version5.0

Redhat ≫ Enterprise Linux Desktop Version6.0

Redhat ≫ Enterprise Linux Eus Version6.5

Redhat ≫ Enterprise Linux Server Version5.0

Redhat ≫ Enterprise Linux Server Version6.0

Redhat ≫ Enterprise Linux Server Aus Version6.5

Redhat ≫ Enterprise Linux Server Eus Version6.5

Redhat ≫ Enterprise Linux Server Tus Version6.5

Redhat ≫ Enterprise Linux Workstation Version5.0

Redhat ≫ Enterprise Linux Workstation Version6.0

Fedoraproject ≫ Fedora Version19

Fedoraproject ≫ Fedora Version20

Suse ≫ Suse Linux Enterprise Software Development Kit Version11.0 Updatesp3

Opensuse ≫ Opensuse Version11.4

Opensuse ≫ Opensuse Version12.3

Opensuse ≫ Opensuse Version13.1

Suse ≫ Suse Linux Enterprise Desktop Version11 Updatesp3

Suse ≫ Suse Linux Enterprise Server Version11 Updatesp3 SwPlatform-

Suse ≫ Suse Linux Enterprise Server Version11 Updatesp3 SwPlatformvmware

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.85%	0.728

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory

https://security.gentoo.org/glsa/201504-01

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html

Third Party Advisory

Mailing List

http://download.novell.com/Download?buildid=VYQsgaFpQ2k

Broken Link

http://download.novell.com/Download?buildid=Y2fux-JW1Qc

Broken Link

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html

Third Party Advisory

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html

Third Party Advisory

Mailing List

http://osvdb.org/102864

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-0132.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0133.html

Third Party Advisory

http://secunia.com/advisories/56706

Broken Link

http://secunia.com/advisories/56761

Broken Link

http://secunia.com/advisories/56763

Broken Link

http://secunia.com/advisories/56767

Broken Link

http://secunia.com/advisories/56787

Broken Link

http://secunia.com/advisories/56858

Broken Link

http://secunia.com/advisories/56888

Broken Link

http://www.debian.org/security/2014/dsa-2858

Third Party Advisory

http://www.mozilla.org/security/announce/2014/mfsa2014-01.html

Vendor Advisory

http://www.securityfocus.com/bid/65317

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1029717

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1029720

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1029721

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-2102-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2102-2

Third Party Advisory

http://www.ubuntu.com/usn/USN-2119-1

Third Party Advisory

https://8pecxstudios.com/?page_id=44080

Broken Link

URL Repurposed

https://bugzilla.mozilla.org/show_bug.cgi?id=921470

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=925896

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=936808

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=937132

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=937697

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=945334

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=945939

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=950000

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=950438

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=951366

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=953114

Vendor Advisory

Exploit

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/90899

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2014-1477

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-1477

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-1477

EUVD