CVE-2014-1553 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of se...
HighCVSS 10.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE evergreen | = 11.4 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| mozilla Firefox | <= 31.1.0 | No fix listed |
| mozilla Firefox | = 30.0 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Thunderbird | = 31.0 | No fix listed |
References
- openSUSE-SU-2014:1098 third-party-advisory vendor-advisory
- openSUSE-SU-2015:0138 third-party-advisory vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- openSUSE-SU-2014:1099 third-party-advisory vendor-advisory
- 60148 third-party-advisory
- 61114 third-party-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 69524 vdb-entry
- 1030793 vdb-entry
- 1030794 vdb-entry
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- GLSA-201504-01 vendor-advisory