CVE-2014-1562: Buffer Overflow
First published: Wed Sep 03 2014(Updated: )
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Credit: security@mozilla.org security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox ESR | =24.0 | |
| Mozilla Firefox ESR | =24.0.1 | |
| Mozilla Firefox ESR | =24.0.2 | |
| Mozilla Firefox ESR | =24.1.0 | |
| Mozilla Firefox ESR | =24.1.1 | |
| Mozilla Firefox ESR | =24.2 | |
| Mozilla Firefox ESR | =24.3 | |
| Mozilla Firefox ESR | =24.4 | |
| Mozilla Firefox ESR | =24.5 | |
| Mozilla Firefox ESR | =24.6 | |
| Mozilla Firefox ESR | =24.7 | |
| Mozilla Firefox ESR | =31.0 | |
| Mozilla Thunderbird | =24.0 | |
| Mozilla Thunderbird | =24.0.1 | |
| Mozilla Thunderbird | =24.1 | |
| Mozilla Thunderbird | =24.1.1 | |
| Mozilla Thunderbird | =24.2 | |
| Mozilla Thunderbird | =24.3 | |
| Mozilla Thunderbird | =24.4 | |
| Mozilla Thunderbird | =24.5 | |
| Mozilla Thunderbird | =24.6 | |
| Mozilla Thunderbird | =24.7 | |
| Mozilla Thunderbird | =31.0 | |
| Mozilla Firefox | <=31.1.0 | |
| Mozilla Firefox | =30.0 | |
| Mozilla Firefox | =31.0 | |
| Mozilla Firefox | =24.0 | |
| Mozilla Firefox | =24.1.0 | |
| Mozilla Firefox | =24.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
- http://secunia.com/advisories/60148
- http://secunia.com/advisories/60186
- http://secunia.com/advisories/61114
- http://secunia.com/advisories/61390
- http://www.debian.org/security/2014/dsa-3018
- http://www.debian.org/security/2014/dsa-3028
- http://www.mozilla.org/security/announce/2014/mfsa2014-67.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/69519
- http://www.securitytracker.com/id/1030793
- http://www.securitytracker.com/id/1030794
- https://bugzilla.mozilla.org/show_bug.cgi?id=1054359
- https://security.gentoo.org/glsa/201504-01
- agent/references
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/event
- agent/last-modified-date
- agent/author
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/mozilla
- canonical/mozilla firefox esr
- version/mozilla firefox esr/24.0
- version/mozilla firefox esr/24.0.1
- version/mozilla firefox esr/24.0.2
- version/mozilla firefox esr/24.1.0
- version/mozilla firefox esr/24.1.1
- version/mozilla firefox esr/24.2
- version/mozilla firefox esr/24.3
- version/mozilla firefox esr/24.4
- version/mozilla firefox esr/24.5
- version/mozilla firefox esr/24.6
- version/mozilla firefox esr/24.7
- version/mozilla firefox esr/31.0
- canonical/mozilla thunderbird
- version/mozilla thunderbird/24.0
- version/mozilla thunderbird/24.0.1
- version/mozilla thunderbird/24.1
- version/mozilla thunderbird/24.1.1
- version/mozilla thunderbird/24.2
- version/mozilla thunderbird/24.3
- version/mozilla thunderbird/24.4
- version/mozilla thunderbird/24.5
- version/mozilla thunderbird/24.6
- version/mozilla thunderbird/24.7
- version/mozilla thunderbird/31.0
- canonical/mozilla firefox
- version/mozilla firefox/31.1.0
- version/mozilla firefox/30.0
- version/mozilla firefox/31.0
- version/mozilla firefox/24.0
- version/mozilla firefox/24.1.0
- version/mozilla firefox/24.1.1