CVE-2014-1563: Use After Free
Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1563?
CVE-2014-1563 has a High severity rating due to its ability to allow remote code execution and denial of service.
How do I fix CVE-2014-1563?
To fix CVE-2014-1563, update Mozilla Firefox to version 32.0 or later, or upgrade Firefox ESR to version 31.1 or later.
What products are affected by CVE-2014-1563?
CVE-2014-1563 affects Mozilla Firefox versions prior to 32.0, Firefox ESR versions before 31.1, and Thunderbird versions before 31.1.
Can CVE-2014-1563 be exploited remotely?
Yes, CVE-2014-1563 can be exploited remotely through specially crafted SVG animations.
What is the impact of CVE-2014-1563?
The impact of CVE-2014-1563 includes possible arbitrary code execution and heap memory corruption leading to a denial of service.