CVEvulnerability

CVE-2014-1513

8.8 HIGH Published 2014-03-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-03-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-787

Description

TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.

Affected configurations

• mozilla firefox (< 28.0) • mozilla firefox (>= 24.0 < 24.4) • mozilla seamonkey (< 2.25) • mozilla thunderbird (< 24.4) • debian debian linux 7.0 • debian debian linux 8.0 • suse suse linux enterprise software development kit 11.0 • opensuse opensuse 11.4 • opensuse opensuse 12.3 • opensuse opensuse 13.1 • suse suse linux enterprise desktop 11 • suse suse linux enterprise server 11 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.5 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 6.5 • redhat enterprise linux server eus 6.5 • redhat enterprise linux server tus 6.5 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.10

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References