Veracode Vulnerability DatabaseVERACODE:11327Denial Of Service (DoS)
EPSS
Percentile
93.8%
firefox is vulnerable to denial of service (DoS) attacks. The vulnerability exists through an unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
References
lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
secunia.com/advisories/60148
secunia.com/advisories/60186
secunia.com/advisories/61114
secunia.com/advisories/61390
www.debian.org/security/2014/dsa-3018
www.debian.org/security/2014/dsa-3028
www.mozilla.org/security/announce/2014/mfsa2014-67.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securityfocus.com/bid/69519
www.securitytracker.com/id/1030793
www.securitytracker.com/id/1030794
access.redhat.com/security/updates/classification/#critical
bugzilla.mozilla.org/show_bug.cgi?id=1054359
rhn.redhat.com/errata/RHSA-2014-1144.html
security.gentoo.org/glsa/201504-01
www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#firefox24.8
Related
