Lucene search

MozillaCVE-2014-8635

HistoryJan 14, 2015 - 11:59 a.m.

CVE-2014-8635

2015-01-1411:59:04

mozilla

web.nvd.nist.gov

cve-2014-8635

mozilla firefox

seamonkey

memory corruption

application crash

remote attackers

denial of service

arbitrary code

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.9

Confidence

High

EPSS

0.264

Percentile

96.8%

JSON

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected configurations

Nvd

Node

mozillaseamonkeyRange≤2.31

Node

mozillafirefoxRange≤34.0.5

VendorProductVersionCPE
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	seamonkey	*	cpe:2.3:a:mozilla:seamonkey::::::::
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::

References

lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html

lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html

lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

lists.opensuse.org/opensuse-updates/2015-01/msg00071.html

secunia.com/advisories/62242

secunia.com/advisories/62250

secunia.com/advisories/62253

secunia.com/advisories/62316

secunia.com/advisories/62418

secunia.com/advisories/62446

secunia.com/advisories/62657

secunia.com/advisories/62790

www.mozilla.org/security/announce/2014/mfsa2015-01.html

www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

www.securityfocus.com/bid/72050

www.securitytracker.com/id/1031533

www.securitytracker.com/id/1031534

bugzilla.mozilla.org/show_bug.cgi?id=1026774

bugzilla.mozilla.org/show_bug.cgi?id=1027300

bugzilla.mozilla.org/show_bug.cgi?id=1054538

bugzilla.mozilla.org/show_bug.cgi?id=1067473

bugzilla.mozilla.org/show_bug.cgi?id=1070962

bugzilla.mozilla.org/show_bug.cgi?id=1072130

bugzilla.mozilla.org/show_bug.cgi?id=1072871

bugzilla.mozilla.org/show_bug.cgi?id=1098583

security.gentoo.org/glsa/201504-01

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.9

Confidence

High

EPSS

0.264

Percentile

96.8%

JSON

Related for CVE-2014-8635