CVEvulnerability
CVE-2014-1593
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.
Affected configurations
• mozilla firefox (<= 31.2)
• mozilla firefox (<= 33.0)
• mozilla seamonkey (<= 2.30)
• mozilla thunderbird (<= 31.2)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://www.debian.org/security/2014/dsa-3090 www.debian.org
- http://www.debian.org/security/2014/dsa-3092 www.debian.org
- http://www.mozilla.org/security/announce/2014/mfsa2014-88.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html www.oracle.com
- http://www.securityfocus.com/bid/71395 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1085175 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://www.debian.org/security/2014/dsa-3090 www.debian.org
- http://www.debian.org/security/2014/dsa-3092 www.debian.org
- http://www.mozilla.org/security/announce/2014/mfsa2014-88.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html www.oracle.com
- http://www.securityfocus.com/bid/71395 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1085175 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org