10

CVE-2014-1541

Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MozillaThunderbird Version <= 24.5
MozillaThunderbird Version24.0
MozillaThunderbird Version24.0.1
MozillaThunderbird Version24.1
MozillaThunderbird Version24.1.1
MozillaThunderbird Version24.2
MozillaThunderbird Version24.3
MozillaThunderbird Version24.4
MozillaFirefox Version <= 29.0.1
MozillaFirefox Version24.0
MozillaFirefox Version24.1.0
MozillaFirefox Version24.1.1
MozillaFirefox ESR Version24.0.1
MozillaFirefox ESR Version24.0.2
MozillaFirefox ESR Version24.2
MozillaFirefox ESR Version24.3
MozillaFirefox ESR Version24.4
MozillaFirefox ESR Version24.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.1% 0.773
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C