Lucene search
Mozilla FoundationMFSA2014-78HistoryOct 14, 2014 - 12:00 a.m.
Further uninitialized memory use during GIF rendering — Mozilla
2014-10-1400:00:00
Mozilla Foundation
www.mozilla.org
33
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
74.4%
Google security researcher Michal Zalewski reported that when a malformed GIF image is repeatedly rendered within a element, memory may not always be properly initialized. The resulting series of images then uses this uninitialized memory during rendering, allowing data to potentially leak to web content.
Affected configurations
Node
mozillafirefoxRange<33
ORmozillafirefox_osRange<2.2
ORmozillaseamonkeyRange<2.30
Related
nvd
nvd
CVE-2014-1580
2014-10-15 10:55:06
cvelist
cvelist
CVE-2014-1580
2014-10-15 10:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-78) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-2372-1)
2014-10-15 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Oct 2014) - Windows
2014-10-17 00:00:00
ubuntucve
ubuntucve
CVE-2014-1580
2014-10-14 00:00:00
cve
cve
CVE-2014-1580
2014-10-15 10:55:06
securityvulns
securityvulns
two browser mem disclosure bugs (CVE-2014-1580 and CVE-something-or-other)
2014-10-16 00:00:00
Mozilla Firefox and Microsoft Internet Explorer information leakage
2014-10-16 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-10-15 00:00:00
prion
prion
Information disclosure
2014-10-15 10:55:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-10-14 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (9c1495ac-8d8c-4789-a0f3-8ca6b476619c)
2014-10-16 00:00:00
Fedora 21 : firefox-33.0-1.fc21 (2014-14084)
2014-11-03 00:00:00
Mozilla Firefox ESR < 31.2 Multiple Vulnerabilities
2019-11-06 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2014-10-14 00:00:00
mageia
mageia
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
74.4%
Related for MFSA2014-78