CVE-2014-1576: Buffer Overflow
Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1576?
CVE-2014-1576 has a medium severity rating due to its potential for remote code execution.
How do I fix CVE-2014-1576?
To fix CVE-2014-1576, update Mozilla Firefox to version 33.0 or later, or update Thunderbird to version 31.2 or later.
Which software is affected by CVE-2014-1576?
CVE-2014-1576 affects Mozilla Firefox versions prior to 33.0, Firefox ESR versions prior to 31.2, and Thunderbird versions prior to 31.2.
Can CVE-2014-1576 be exploited through CSS?
Yes, CVE-2014-1576 can be exploited via malicious Cascading Style Sheets (CSS) token sequences.
What type of vulnerability is CVE-2014-1576?
CVE-2014-1576 is a heap-based buffer overflow vulnerability.