Lucene search
Mozilla FoundationMFSA2014-39HistoryApr 29, 2014 - 12:00 a.m.
Use-after-free in the Text Track Manager for HTML video — Mozilla
2014-04-2900:00:00
Mozilla Foundation
www.mozilla.org
28
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.018
Percentile
88.3%
Using the Address Sanitizer tool, security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team found a use-after-free in the Text Track Manager while processing HTML video. This was caused by inconsistent garbage collection of Text Track Manager variables and results in a potentially exploitable crash.
Affected configurations
Node
mozillafirefoxRange<29
ORmozillaseamonkeyRange<2.26
Related
nvd
nvd
CVE-2014-1525
2014-04-30 10:49:04
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-39) - Linux
2021-11-11 00:00:00
Mageia: Security Advisory (MGASA-2014-0259)
2022-01-28 00:00:00
SeaMonkey Multiple Vulnerabilities-01 (May 2014) - Windows
2014-05-06 00:00:00
prion
prion
Memory corruption
2014-04-30 10:49:00
cvelist
cvelist
CVE-2014-1525
2014-04-30 10:00:00
ubuntucve
ubuntucve
CVE-2014-1525
2014-04-29 00:00:00
cve
cve
CVE-2014-1525
2014-04-30 10:49:04
mageia
mageia
Updated iceape packages fix multiple vulnerabilities
2014-06-11 20:56:59
nessus
nessus
Firefox < 29.0 Multiple Vulnerabilities (Mac OS X)
2014-04-29 00:00:00
SeaMonkey < 2.26 Multiple Vulnerabilities
2014-04-29 00:00:00
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2185-1)
2014-04-30 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2014-04-29 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-05-01 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-04-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
suse
suse
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.018
Percentile
88.3%
Related for MFSA2014-39