CVE-2014-1562

Firefox < 32.0 and ESR 24.x < 24.8 and 31.x < 31.1 - Remote Code Execution via Memory Corruption

Title source: llm

Description

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References (20)

Core 20

Core References

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/69519

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=1054359

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-3018

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030794

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2014/mfsa2014-67.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/60186

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61390

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/60148

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61114

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-3028

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030793

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201504-01

Scores

EPSS 0.0127

EPSS Percentile 79.8%

Details

CWE

CWE-119

Status published

Products (25)

mozilla/firefox 24.0

mozilla/firefox 24.0.1

mozilla/firefox 24.0.2

mozilla/firefox 24.1.0

mozilla/firefox 24.1.1

mozilla/firefox 31.0

mozilla/firefox 30.0

mozilla/firefox < 31.1.0

mozilla/firefox_esr 24.2

mozilla/firefox_esr 24.3

... and 15 more

Published Sep 03, 2014

Tracked Since Feb 18, 2026