CVE-2014-1496 Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during....
MediumCVSS 5.5
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 28.0 | 28.0 |
| mozilla Firefox | >= 24.0, < 24.4 | 24.4 |
| mozilla seamonkey | < 2.25 | 2.25 |
| mozilla Thunderbird | < 24.4 | 24.4 |
| suse linux enterprise software development kit | = 11.0-sp3 | No fix listed |
| suse linux enterprise desktop | = 11-sp3 | No fix listed |
| suse linux enterprise server | = 11-sp3 | No fix listed |
References
- SUSE-SU-2014:0418 mailing-list third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- bugzilla.mozilla.org exploit issue-tracking vendor-advisory
- GLSA-201504-01 third-party-advisory vendor-advisory