CVE-2014-1477

Mozilla: Miscellaneous memory safety hazards (rv:24.3) (MFSA 2014-01)

Published Feb 6, 2014 CVSS 3.1 · 9.8 Critical EPSS 5.5% KEV · Not listed
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2858-1 iceweasel security update
EUVD EUVD EUVD-2014-1553 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Ubuntu USN Ubuntu USN USN-2102-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2119-1 Thunderbird vulnerabilities
References
Link Providers
http://download.novell.com/Download?buildid=VYQsgaFpQ2k cve-icon cve-icon
http://download.novell.com/Download?buildid=Y2fux-JW1Qc cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html cve-icon cve-icon
http://osvdb.org/102864 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0132.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0133.html cve-icon cve-icon
http://secunia.com/advisories/56706 cve-icon cve-icon
http://secunia.com/advisories/56761 cve-icon cve-icon
http://secunia.com/advisories/56763 cve-icon cve-icon
http://secunia.com/advisories/56767 cve-icon cve-icon
http://secunia.com/advisories/56787 cve-icon cve-icon
http://secunia.com/advisories/56858 cve-icon cve-icon
http://secunia.com/advisories/56888 cve-icon cve-icon
http://www.debian.org/security/2014/dsa-2858 cve-icon cve-icon
http://www.mozilla.org/security/announce/2014/mfsa2014-01.html cve-icon cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html cve-icon cve-icon
http://www.securityfocus.com/bid/65317 cve-icon cve-icon
http://www.securitytracker.com/id/1029717 cve-icon cve-icon
http://www.securitytracker.com/id/1029720 cve-icon cve-icon
http://www.securitytracker.com/id/1029721 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2102-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2102-2 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2119-1 cve-icon cve-icon
https://8pecxstudios.com/?page_id=44080 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=921470 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=925896 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=936808 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=937132 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=937697 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=945334 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=945939 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=950000 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=950438 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=951366 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=953114 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/90899 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2014-1477 cve-icon
https://security.gentoo.org/glsa/201504-01 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2014-1477 cve-icon
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr