CVE-2014-8637: Infoleak
Published Jan 14, 2015
·Updated
Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.
Affected Software
2 affected components
Mozilla SeaMonkey<=2.31
Mozilla Firefox<=34.0.5
Event History
Jan 14, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8637?
CVE-2014-8637 has been classified as a moderate severity vulnerability due to potential exposure of sensitive information.
2
How do I fix CVE-2014-8637?
To fix CVE-2014-8637, upgrade Mozilla Firefox to version 35.0 or later, and SeaMonkey to version 2.32 or later.
3
What types of attacks can be executed using CVE-2014-8637?
CVE-2014-8637 allows remote attackers to exploit crafted web pages to access sensitive information from process memory.
4
Which versions of Mozilla Firefox are affected by CVE-2014-8637?
CVE-2014-8637 affects Mozilla Firefox versions prior to 35.0.
5
Which versions of SeaMonkey are impacted by CVE-2014-8637?
CVE-2014-8637 impacts SeaMonkey versions before 2.32.