4.3

CVE-2014-1564

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opensuse ≫ Evergreen Version11.4
Opensuse ≫ Opensuse Version12.3
Opensuse ≫ Opensuse Version13.1
Mozilla ≫ Firefox Version <= 31.1.0
Mozilla ≫ Firefox Version30.0
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Thunderbird Version31.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.47% 0.917
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
Third Party Advisory
http://secunia.com/advisories/60148
http://secunia.com/advisories/61114
http://www.securitytracker.com/id/1030793
http://www.securitytracker.com/id/1030794
http://packetstormsecurity.com/files/128132/Mozilla-Firefox-Secret-Leak.html
http://seclists.org/fulldisclosure/2014/Sep/18
http://www.mozilla.org/security/announce/2014/mfsa2014-69.html
Vendor Advisory
http://www.securityfocus.com/archive/1/533357/100/0/threaded
http://www.securityfocus.com/bid/69525
https://bugzilla.mozilla.org/show_bug.cgi?id=1045977
Issue Tracking