10

CVE-2014-1551

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 30.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version24.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version24.1.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version24.1.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.0.2
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.2
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.3
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.4
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.5
   Microsoft ≫ Windows
Mozilla ≫ Firefox ESR Version24.6
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version <= 24.6
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.0
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.0.1
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.1
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.1.1
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.2
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.3
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.4
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version24.5
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.31% 0.878
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C