Lucene search
Mozilla FoundationMFSA2014-89HistoryDec 02, 2014 - 12:00 a.m.
Bad casting from the BasicThebesLayer to BasicContainerLayer — Mozilla
2014-12-0200:00:00
Mozilla Foundation
www.mozilla.org
26
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.057
Percentile
93.4%
Security researchers Byoungyoung Lee, Chengyu Song, and Taesoo Kim at the Georgia Tech Information Security Center (GTISC) reported a bad casting from the BasicThebesLayer to BasicContainerLayer, resulting in undefined behavior. This behavior is potentially exploitable with some compilers but no clear mechanism to trigger it through web content was identified.
Affected configurations
Node
mozillafirefoxRange<34
ORmozillafirefox_esrRange<31.3
ORmozillafirefox_osRange<2.2
ORmozillaseamonkeyRange<2.31
ORmozillathunderbirdRange<31.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox_esr | * | cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
| mozilla | firefox_os | * | cpe:2.3:o:mozilla:firefox_os:*:*:*:*:*:*:*:* |
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
Related
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:05:37
cve
cve
CVE-2014-1594
2014-12-11 11:59:08
nvd
nvd
CVE-2014-1594
2014-12-11 11:59:08
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-89) - Linux
2021-11-11 00:00:00
Debian Security Advisory DSA 3092-1 (icedove - security update)
2014-12-07 00:00:00
Debian Security Advisory DSA 3090-1 (iceweasel - security update)
2014-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2014-1594
2014-12-02 00:00:00
cvelist
cvelist
CVE-2014-1594
2014-12-11 11:00:00
prion
prion
Code injection
2014-12-11 11:59:00
nessus
nessus
Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20141202)
2014-12-04 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:1654-1)
2014-12-18 00:00:00
Oracle Linux 6 : thunderbird (ELSA-2014-1924)
2014-12-03 00:00:00
osv
osv
iceweasel - security update
2014-12-04 00:00:00
icedove - security update
2014-12-07 00:00:00
centos
centos
firefox security update
2014-12-03 22:51:38
thunderbird security update
2014-12-03 22:57:24
ubuntu
ubuntu
Thunderbird vulnerabilities
2014-12-03 00:00:00
Firefox vulnerabilities
2014-12-02 00:00:00
redhat
redhat
(RHSA-2014:1919) Critical: firefox security update
2014-12-02 00:00:00
(RHSA-2014:1924) Important: thunderbird security update
2014-12-02 00:00:00
oraclelinux
oraclelinux
firefox security update
2014-12-03 00:00:00
thunderbird security update
2014-12-02 00:00:00
debian
debian
[SECURITY] [DSA 3090-1] iceweasel security update
2014-12-04 15:30:11
[SECURITY] [DSA 3092-1] icedove security update
2014-12-07 19:07:11
mageia
mageia
Updated firefox & thunderbird packages fix security vulnerabilities
2014-12-03 22:27:32
Updated iceape package fixes security vulnerabilities
2014-12-09 23:12:41
suse
suse
Security update for Mozilla Firefox (important)
2014-12-12 03:05:16
Firefox update to latest 31ESR release (important)
2015-01-25 16:04:59
Mozilla (Firefox/Thunderbird) updates to 31.8.0 (important)
2015-07-18 19:07:56
archlinux
archlinux
firefox: multiple issues
2014-12-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-12-01 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-12-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.057
Percentile
93.4%
Related for MFSA2014-89