Lucene search

K
cveMozillaCVE-2014-1554
HistorySep 03, 2014 - 10:55 a.m.

CVE-2014-1554

2014-09-0310:55:06
CWE-119
mozilla
web.nvd.nist.gov
44
cve-2014-1554
mozilla firefox
browser engine
remote attackers
memory corruption
application crash
remote code execution
denial of service

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.9

Confidence

High

EPSS

0.067

Percentile

93.9%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected configurations

Nvd
Node
mozillafirefoxRange31.1.0
OR
mozillafirefoxMatch30.0
OR
mozillafirefoxMatch31.0
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillafirefox30.0cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
mozillafirefox31.0cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.9

Confidence

High

EPSS

0.067

Percentile

93.9%