CVE-2014-1556

Mozilla Firefox < 31.0 and Firefox ESR < 24.7 - Remote Code Execution via WebGL Content

Title source: llm
STIX 2.1

Description

Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.

References (18)

Core 18
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59719
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60083
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=1028891
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/68822
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60621
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201504-01
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60306
Various Sources x_refsource_confirm
http://linux.oracle.com/errata/ELSA-2014-0918.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030620
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-2996
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030619
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60486
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60628
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-2986
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59760
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59591

Scores

EPSS 0.0090
EPSS Percentile 76.0%

Details

CWE
CWE-94
Status published
Products (20)
mozilla/firefox 24.0
mozilla/firefox 24.0.1
mozilla/firefox 24.0.2
mozilla/firefox 24.1.0
mozilla/firefox 24.1.1
mozilla/firefox < 30.0
mozilla/firefox_esr 24.2
mozilla/firefox_esr 24.3
mozilla/firefox_esr 24.4
mozilla/firefox_esr 24.5
... and 10 more
Published Jul 23, 2014
Tracked Since Feb 18, 2026