Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMozillaCVE-2014-1564
HistorySep 03, 2014 - 10:55 a.m.

CVE-2014-1564

2014-09-0310:55:06
CWE-824
mozilla
web.nvd.nist.gov
59
cve-2014-1564
mozilla firefox
thunderbird
gif rendering
memory vulnerability
web script
canvas element
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.

Affected configurations

Nvd
Node
opensuseevergreenMatch11.4
OR
opensuseopensuseMatch12.3
OR
opensuseopensuseMatch13.1
Node
mozillafirefoxRange≤31.1.0
OR
mozillafirefoxMatch30.0
OR
mozillafirefoxMatch31.0
OR
mozillafirefox_esrMatch31.0
OR
mozillathunderbirdMatch31.0
VendorProductVersionCPE
opensuseevergreen11.4cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
opensuseopensuse12.3cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
opensuseopensuse13.1cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillafirefox30.0cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
mozillafirefox31.0cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
mozillafirefox_esr31.0cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*
mozillathunderbird31.0cpe:2.3:a:mozilla:thunderbird:31.0:*:*:*:*:*:*:*

Related

packetstorm 1
securityvulns 2
prion 1
mozilla 1
openvas 13
cvelist 1
nvd 1
exploitdb 1
ubuntucve 1
fireeye 1
nessus 13
suse 4
ubuntu 2
mageia 1
gentoo 1
packetstorm
packetstorm
Mozilla Firefox Secret Leak
2014-09-03 00:00:00
securityvulns
securityvulns
Uninit memory disclosure via truncated images in Firefox
2014-09-15 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-09-15 00:00:00
prion
prion
Information disclosure
2014-09-03 10:55:00
mozilla
mozilla
Uninitialized memory use during GIF rendering — Mozilla
2014-09-02 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-69) - Linux
2021-11-11 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities-02 (Sep 2014) - Windows
2014-09-05 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-02 (Sep 2014) - Windows
2014-09-05 00:00:00
cvelist
cvelist
CVE-2014-1564
2014-09-03 10:00:00
nvd
nvd
CVE-2014-1564
2014-09-03 10:55:06
exploitdb
exploitdb
Mozilla Firefox 9.0.1 / Thunderbird 3.1.20 - Information Disclosure
2014-09-02 00:00:00
ubuntucve
ubuntucve
CVE-2014-1564
2014-09-02 00:00:00
fireeye
fireeye
Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory
2021-03-03 00:00:00
nessus
nessus
Firefox ESR 31.x < 31.1 Multiple Vulnerabilities
2014-09-03 00:00:00
Mozilla Thunderbird < 31.1 Multiple Vulnerabilities (Mac OS X)
2014-09-03 00:00:00
Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2330-1)
2014-09-12 00:00:00
suse
suse
MozillaThunderbird: Update to 31.1 release (important)
2014-09-09 12:07:15
Firefox update to latest 31ESR release (important)
2015-01-25 16:04:59
Mozilla (Firefox/Thunderbird) updates to 31.8.0 (important)
2015-07-18 19:07:56
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-09-11 00:00:00
Firefox vulnerabilities
2014-09-02 00:00:00
mageia
mageia
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON
Related for CVE-2014-1564
packetstorm1securityvulns2prion1mozilla1openvas13cvelist1nvd1exploitdb1ubuntucve1fireeye1nessus13suse4ubuntu2mageia1gentoo1