CVE-2014-1541 Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 a...
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Thunderbird | <= 24.5 | No fix listed |
| mozilla Thunderbird | = 24.0 | No fix listed |
| mozilla Thunderbird | = 24.0.1 | No fix listed |
| mozilla Thunderbird | = 24.1 | No fix listed |
| mozilla Thunderbird | = 24.1.1 | No fix listed |
| mozilla Thunderbird | = 24.2 | No fix listed |
| mozilla Thunderbird | = 24.3 | No fix listed |
| mozilla Thunderbird | = 24.4 | No fix listed |
| mozilla Firefox | <= 29.0.1 | No fix listed |
| mozilla Firefox | = 24.0 | No fix listed |
| mozilla Firefox | = 24.0.1 | No fix listed |
| mozilla Firefox | = 24.0.2 | No fix listed |
| mozilla Firefox | = 24.1.0 | No fix listed |
| mozilla Firefox | = 24.1.1 | No fix listed |
| mozilla firefox esr | = 24.2 | No fix listed |
| mozilla firefox esr | = 24.3 | No fix listed |
| mozilla firefox esr | = 24.4 | No fix listed |
| mozilla firefox esr | = 24.5 | No fix listed |
References
- linux.oracle.com
- linux.oracle.com
- openSUSE-SU-2014:0797 vendor-advisory
- SUSE-SU-2014:0824 vendor-advisory
- openSUSE-SU-2014:0819 vendor-advisory
- openSUSE-SU-2014:0855 vendor-advisory
- openSUSE-SU-2014:0858 vendor-advisory
- RHSA-2014:0741 vendor-advisory
- RHSA-2014:0742 vendor-advisory
- 58984 third-party-advisory
- 59052 third-party-advisory
- 59149 third-party-advisory
- 59150 third-party-advisory
- 59165 third-party-advisory
- 59169 third-party-advisory
- 59170 third-party-advisory
- 59171 third-party-advisory
- 59229 third-party-advisory
- 59275 third-party-advisory
- 59328 third-party-advisory
- 59377 third-party-advisory
- 59387 third-party-advisory
- 59425 third-party-advisory
- 59486 third-party-advisory
- 59866 third-party-advisory
- DSA-2955 vendor-advisory
- DSA-2960 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 67979 vdb-entry
- 1030386 vdb-entry
- 1030388 vdb-entry
- USN-2243-1 vendor-advisory
- USN-2250-1 vendor-advisory
- bugzilla.mozilla.org
- GLSA-201504-01 vendor-advisory