4.3

CVE-2014-1564

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.

Data is provided by the National Vulnerability Database (NVD)
Opensuse ≫ Evergreen Version11.4
Opensuse ≫ Opensuse Version12.3
Opensuse ≫ Opensuse Version13.1
Mozilla ≫ Firefox Version <= 31.1.0
Mozilla ≫ Firefox Version30.0
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Thunderbird Version31.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 15.41% 0.94
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.