9.3
CVE-2014-1555
- EPSS 4.91%
- Veröffentlicht 23.07.2014 11:12:43
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginUse-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox ESR Version 24.2
Mozilla ≫ Firefox ESR Version 24.3
Mozilla ≫ Firefox ESR Version 24.4
Mozilla ≫ Firefox ESR Version 24.5
Mozilla ≫ Firefox ESR Version 24.6
Mozilla ≫ Thunderbird Version <= 24.6
Mozilla ≫ Thunderbird Version 24.0
Mozilla ≫ Thunderbird Version 24.0.1
Mozilla ≫ Thunderbird Version 24.1
Mozilla ≫ Thunderbird Version 24.1.1
Mozilla ≫ Thunderbird Version 24.2
Mozilla ≫ Thunderbird Version 24.3
Mozilla ≫ Thunderbird Version 24.4
Mozilla ≫ Thunderbird Version 24.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.91% | 0.91 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://security.gentoo.org/glsa/201504-01
http://secunia.com/advisories/60621
http://secunia.com/advisories/59591
http://secunia.com/advisories/59719
http://secunia.com/advisories/59760
http://secunia.com/advisories/60083
http://secunia.com/advisories/60486
http://secunia.com/advisories/60628
http://www.debian.org/security/2014/dsa-2986
http://www.debian.org/security/2014/dsa-2996
http://linux.oracle.com/errata/ELSA-2014-0918.html
http://secunia.com/advisories/60306
http://www.securitytracker.com/id/1030619
http://www.securitytracker.com/id/1030620
http://www.mozilla.org/security/announce/2014/mfsa2014-61.html
http://www.securityfocus.com/bid/68814
https://bugzilla.mozilla.org/show_bug.cgi?id=1023121