CVE-2014-1567

Firefox < 31.1.0 and ESR 24.x < 24.8 and 31.x < 31.1 - Remote Code Execution via DirectionalityUtils Use-After-Free

Title source: llm

Description

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.

References (20)

Core 20

Core References

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2014/mfsa2014-72.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=1037641

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/69520

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201504-01

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-3018

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030794

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/60186

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61390

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/60148

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61114

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-3028

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030793

Scores

EPSS 0.0257

EPSS Percentile 85.8%

Details

Status published

Products (25)

mozilla/firefox 30.0

mozilla/firefox 31.0

mozilla/firefox 24.0

mozilla/firefox 24.0.1

mozilla/firefox 24.0.2

mozilla/firefox 24.1.0

mozilla/firefox 24.1.1

mozilla/firefox < 31.1.0

mozilla/firefox_esr 24.2

mozilla/firefox_esr 24.3

... and 15 more

Published Sep 03, 2014

Tracked Since Feb 18, 2026