9.3

CVE-2014-1567

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 31.1.0
Mozilla ≫ Firefox Version30.0
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Firefox Version24.0
Mozilla ≫ Firefox Version24.0.1
Mozilla ≫ Firefox Version24.0.2
Mozilla ≫ Firefox Version24.1.0
Mozilla ≫ Firefox Version24.1.1
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Firefox ESR Version24.2
Mozilla ≫ Firefox ESR Version24.3
Mozilla ≫ Firefox ESR Version24.4
Mozilla ≫ Firefox ESR Version24.5
Mozilla ≫ Firefox ESR Version24.6
Mozilla ≫ Firefox ESR Version24.7
Mozilla ≫ Thunderbird Version24.0
Mozilla ≫ Thunderbird Version24.0.1
Mozilla ≫ Thunderbird Version24.1
Mozilla ≫ Thunderbird Version24.1.1
Mozilla ≫ Thunderbird Version24.2
Mozilla ≫ Thunderbird Version24.3
Mozilla ≫ Thunderbird Version24.4
Mozilla ≫ Thunderbird Version24.5
Mozilla ≫ Thunderbird Version24.6
Mozilla ≫ Thunderbird Version24.7
Mozilla ≫ Thunderbird Version31.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.94% 0.91
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
http://secunia.com/advisories/60148
http://secunia.com/advisories/61114
http://www.securitytracker.com/id/1030793
http://www.securitytracker.com/id/1030794
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
http://secunia.com/advisories/60186
http://secunia.com/advisories/61390
http://www.debian.org/security/2014/dsa-3018
http://www.debian.org/security/2014/dsa-3028
http://www.mozilla.org/security/announce/2014/mfsa2014-72.html
Vendor Advisory
http://www.securityfocus.com/bid/69520
https://bugzilla.mozilla.org/show_bug.cgi?id=1037641