CVE-2014-1488

Mozilla: Crash when using web workers with asm.js (MFSA 2014-11)

Published Feb 6, 2014 CVSS 2.0 · 10.0 Critical EPSS 7.1% KEV · Not listed
Description
The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-1564 The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.
Ubuntu USN Ubuntu USN USN-2102-1 Firefox vulnerabilities
History

No history.