CVE-2014-1537 Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (h...
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 29.0.1 | No fix listed |
References
- openSUSE-SU-2014:0797 vendor-advisory
- SUSE-SU-2014:0824 vendor-advisory
- openSUSE-SU-2014:0819 vendor-advisory
- openSUSE-SU-2014:0855 vendor-advisory
- openSUSE-SU-2014:0858 vendor-advisory
- 59052 third-party-advisory
- 59171 third-party-advisory
- 59229 third-party-advisory
- 59377 third-party-advisory
- 59387 third-party-advisory
- 59425 third-party-advisory
- 59486 third-party-advisory
- 59866 third-party-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 67971 vdb-entry
- 1030386 vdb-entry
- 1030388 vdb-entry
- USN-2243-1 vendor-advisory
- bugzilla.mozilla.org
- GLSA-201504-01 vendor-advisory