CVE-2014-1533

Mozilla: Miscellaneous memory safety hazards (rv:24.6) (MFSA 2014-48)

Published Jun 11, 2014 CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2955-1 iceweasel security update
Debian DSA Debian DSA DSA-2960-1 icedove security update
EUVD EUVD EUVD-2014-1609 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Ubuntu USN Ubuntu USN USN-2243-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2250-1 Thunderbird vulnerabilities
References
Link Providers
http://linux.oracle.com/errata/ELSA-2014-0741.html cve-icon cve-icon
http://linux.oracle.com/errata/ELSA-2014-0742.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0741.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0742.html cve-icon cve-icon
http://secunia.com/advisories/58984 cve-icon cve-icon
http://secunia.com/advisories/59052 cve-icon cve-icon
http://secunia.com/advisories/59149 cve-icon cve-icon
http://secunia.com/advisories/59150 cve-icon cve-icon
http://secunia.com/advisories/59165 cve-icon cve-icon
http://secunia.com/advisories/59169 cve-icon cve-icon
http://secunia.com/advisories/59170 cve-icon cve-icon
http://secunia.com/advisories/59171 cve-icon cve-icon
http://secunia.com/advisories/59229 cve-icon cve-icon
http://secunia.com/advisories/59275 cve-icon cve-icon
http://secunia.com/advisories/59328 cve-icon cve-icon
http://secunia.com/advisories/59377 cve-icon cve-icon
http://secunia.com/advisories/59387 cve-icon cve-icon
http://secunia.com/advisories/59425 cve-icon cve-icon
http://secunia.com/advisories/59486 cve-icon cve-icon
http://secunia.com/advisories/59866 cve-icon cve-icon
http://www.debian.org/security/2014/dsa-2955 cve-icon cve-icon
http://www.debian.org/security/2014/dsa-2960 cve-icon cve-icon
http://www.mozilla.org/security/announce/2014/mfsa2014-48.html cve-icon cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html cve-icon cve-icon
http://www.securityfocus.com/bid/67965 cve-icon cve-icon
http://www.securitytracker.com/id/1030386 cve-icon cve-icon
http://www.securitytracker.com/id/1030388 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2243-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2250-1 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1009952 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1011007 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=921622 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=967354 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=978811 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=988719 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=991981 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=992274 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=994907 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=995679 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=996715 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=999651 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2014-1533 cve-icon
https://security.gentoo.org/glsa/201504-01 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2014-1533 cve-icon
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.0.2:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:24.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:24.0:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:24.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.1.1:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 9:42 AM
Reserved
Jan 16, 2014, 12:00 AM
Status
Modified
Published
Jun 11, 2014, 10:57 AM
Modified
Jun 17, 2026, 12:05 AM
Severity
Critical
Public date
Jun 10, 2014, 12:00 AM