CVE-2014-1540 Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitra...
HighCVSS 9.3
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 29.0.1 | No fix listed |
References
- openSUSE-SU-2014:0819 vendor-advisory
- openSUSE-SU-2014:0855 vendor-advisory
- 59052 third-party-advisory
- 59171 third-party-advisory
- 59387 third-party-advisory
- 59486 third-party-advisory
- 59866 third-party-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 67978 vdb-entry
- 1030388 vdb-entry
- USN-2243-1 vendor-advisory
- bugzilla.mozilla.org
- GLSA-201504-01 vendor-advisory