CVE-2014-1555 Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitr...
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 30.0 | No fix listed |
| mozilla Firefox | = 24.0 | No fix listed |
| mozilla Firefox | = 24.0.1 | No fix listed |
| mozilla Firefox | = 24.0.2 | No fix listed |
| mozilla Firefox | = 24.1.0 | No fix listed |
| mozilla Firefox | = 24.1.1 | No fix listed |
| mozilla firefox esr | = 24.2 | No fix listed |
| mozilla firefox esr | = 24.3 | No fix listed |
| mozilla firefox esr | = 24.4 | No fix listed |
| mozilla firefox esr | = 24.5 | No fix listed |
| mozilla firefox esr | = 24.6 | No fix listed |
| mozilla Thunderbird | <= 24.6 | No fix listed |
| mozilla Thunderbird | = 24.0 | No fix listed |
| mozilla Thunderbird | = 24.0.1 | No fix listed |
| mozilla Thunderbird | = 24.1 | No fix listed |
| mozilla Thunderbird | = 24.1.1 | No fix listed |
| mozilla Thunderbird | = 24.2 | No fix listed |
| mozilla Thunderbird | = 24.3 | No fix listed |
| mozilla Thunderbird | = 24.4 | No fix listed |
| mozilla Thunderbird | = 24.5 | No fix listed |
References
- linux.oracle.com
- 59591 third-party-advisory
- 59719 third-party-advisory
- 59760 third-party-advisory
- 60083 third-party-advisory
- 60306 third-party-advisory
- 60486 third-party-advisory
- 60621 third-party-advisory
- 60628 third-party-advisory
- DSA-2986 vendor-advisory
- DSA-2996 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 68814 vdb-entry
- 1030619 vdb-entry
- 1030620 vdb-entry
- bugzilla.mozilla.org
- GLSA-201504-01 vendor-advisory