CVE-2014-1478: Critical severity Mozilla Firefox vulnerability
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey, and unknown other vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1478?
CVE-2014-1478 has a high severity due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2014-1478?
To fix CVE-2014-1478, update Mozilla Firefox to version 27.0 or later and SeaMonkey to version 2.24 or later.
Which software versions are affected by CVE-2014-1478?
CVE-2014-1478 affects Mozilla Firefox versions before 27.0 and SeaMonkey versions before 2.24, along with specific versions of Ubuntu and openSUSE.
Can CVE-2014-1478 be exploited remotely?
Yes, CVE-2014-1478 can be exploited remotely, allowing attackers to cause application crashes or execute arbitrary code.
Is there any workaround for CVE-2014-1478?
There are no recommended workarounds for CVE-2014-1478; the only mitigation is to update to secure versions of the affected software.