CVE-2014-1563 Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to...
HighCVSS 10.0
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE evergreen | = 11.4 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| mozilla Firefox | <= 31.1.0 | No fix listed |
| mozilla Firefox | = 30.0 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Thunderbird | = 31.0 | No fix listed |
References
- openSUSE-SU-2014:1098 third-party-advisory vendor-advisory
- openSUSE-SU-2015:0138 third-party-advisory vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- openSUSE-SU-2014:1099 third-party-advisory vendor-advisory
- 60148 third-party-advisory
- 61114 third-party-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- 69523 vdb-entry
- 1030793 vdb-entry
- 1030794 vdb-entry
- bugzilla.mozilla.org issue-tracking
- GLSA-201504-01 vendor-advisory