CVE-2014-1592

2014-12-0200:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.063

Percentile

93.6%

JSON

Use-after-free vulnerability in the nsHtml5TreeOperation function in
xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3,
Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers
to execute arbitrary code by adding a second root element to an HTML5
document during parsing.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 34.0+build2-0ubuntu0.12.04.1UNKNOWN
ubuntu14.04noarchfirefox< 34.0+build2-0ubuntu0.14.04.1UNKNOWN
ubuntu14.10noarchfirefox< 34.0+build2-0ubuntu0.14.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 1:31.3.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu14.04noarchthunderbird< 1:31.3.0+build1-0ubuntu0.14.04.1UNKNOWN
ubuntu14.10noarchthunderbird< 1:31.3.0+build1-0ubuntu0.14.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 34.0+build2-0ubuntu0.12.04.1	UNKNOWN
ubuntu	14.04	noarch	firefox	< 34.0+build2-0ubuntu0.14.04.1	UNKNOWN
ubuntu	14.10	noarch	firefox	< 34.0+build2-0ubuntu0.14.10.1	UNKNOWN
ubuntu	12.04	noarch	thunderbird	< 1:31.3.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	14.04	noarch	thunderbird	< 1:31.3.0+build1-0ubuntu0.14.04.1	UNKNOWN
ubuntu	14.10	noarch	thunderbird	< 1:31.3.0+build1-0ubuntu0.14.10.1	UNKNOWN