Veracode Vulnerability DatabaseVERACODE:11105Arbitrary Code Execution
EPSS
Percentile
93.8%
firefox is vulnerable to arbitrary code execution attacks. The vulnerability exists as multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
References
linux.oracle.com/errata/ELSA-2014-0918.html
secunia.com/advisories/59591
secunia.com/advisories/59719
secunia.com/advisories/59760
secunia.com/advisories/60083
secunia.com/advisories/60306
secunia.com/advisories/60486
secunia.com/advisories/60621
secunia.com/advisories/60628
www.debian.org/security/2014/dsa-2986
www.debian.org/security/2014/dsa-2996
www.mozilla.org/security/announce/2014/mfsa2014-56.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securityfocus.com/bid/68811
www.securitytracker.com/id/1030619
www.securitytracker.com/id/1030620
access.redhat.com/security/updates/classification/#important
bugzilla.mozilla.org/show_bug.cgi?id=1012694
bugzilla.mozilla.org/show_bug.cgi?id=1019684
bugzilla.mozilla.org/show_bug.cgi?id=1024765
bugzilla.mozilla.org/show_bug.cgi?id=985070
rhn.redhat.com/errata/RHSA-2014-0918.html
security.gentoo.org/glsa/201504-01
www.mozilla.org/security/known-vulnerabilities/thunderbird.html#thunderbird24.7
Related
