9.3

CVE-2014-1567

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 31.1.0
Mozilla ≫ Firefox Version30.0
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Firefox Version24.0
Mozilla ≫ Firefox Version24.1.0
Mozilla ≫ Firefox Version24.1.1
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Firefox ESR Version24.0.1
Mozilla ≫ Firefox ESR Version24.0.2
Mozilla ≫ Firefox ESR Version24.2
Mozilla ≫ Firefox ESR Version24.3
Mozilla ≫ Firefox ESR Version24.4
Mozilla ≫ Firefox ESR Version24.5
Mozilla ≫ Firefox ESR Version24.6
Mozilla ≫ Firefox ESR Version24.7
Mozilla ≫ Thunderbird Version24.0
Mozilla ≫ Thunderbird Version24.0.1
Mozilla ≫ Thunderbird Version24.1
Mozilla ≫ Thunderbird Version24.1.1
Mozilla ≫ Thunderbird Version24.2
Mozilla ≫ Thunderbird Version24.3
Mozilla ≫ Thunderbird Version24.4
Mozilla ≫ Thunderbird Version24.5
Mozilla ≫ Thunderbird Version24.6
Mozilla ≫ Thunderbird Version24.7
Mozilla ≫ Thunderbird Version31.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.81% 0.811
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C