First published: Wed Jun 11 2014(Updated: )
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox ESR | =24.0 | |
Mozilla Firefox ESR | =24.0.1 | |
Mozilla Firefox ESR | =24.0.2 | |
Mozilla Firefox ESR | =24.1.0 | |
Mozilla Firefox ESR | =24.1.1 | |
Mozilla Firefox ESR | =24.2 | |
Mozilla Firefox ESR | =24.3 | |
Mozilla Firefox ESR | =24.4 | |
Mozilla Firefox ESR | =24.5 | |
Mozilla Firefox | <=29.0.1 | |
Mozilla Firefox | =24.0 | |
Mozilla Firefox | =24.1.0 | |
Mozilla Firefox | =24.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-1533 is classified as a high severity vulnerability due to its potential for causing denial of service and possible arbitrary code execution.
To fix CVE-2014-1533, upgrade to Firefox version 30.0 or later, or Firefox ESR version 24.6 or later.
CVE-2014-1533 affects Mozilla Firefox and Mozilla Thunderbird prior to their respective patched versions.
CVE-2014-1533 can lead to memory corruption and application crashes, which may allow attackers to exploit the vulnerability.
There are no official workarounds for CVE-2014-1533 other than upgrading to the latest versions of the affected software.