CVE-2014-1567 Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows....
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 31.1.0 | No fix listed |
| mozilla Firefox | = 30.0 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Firefox | = 24.0 | No fix listed |
| mozilla Firefox | = 24.0.1 | No fix listed |
| mozilla Firefox | = 24.0.2 | No fix listed |
| mozilla Firefox | = 24.1.0 | No fix listed |
| mozilla Firefox | = 24.1.1 | No fix listed |
| mozilla firefox esr | = 24.2 | No fix listed |
| mozilla firefox esr | = 24.3 | No fix listed |
| mozilla firefox esr | = 24.4 | No fix listed |
| mozilla firefox esr | = 24.5 | No fix listed |
| mozilla firefox esr | = 24.6 | No fix listed |
| mozilla firefox esr | = 24.7 | No fix listed |
| mozilla Thunderbird | = 24.0 | No fix listed |
| mozilla Thunderbird | = 24.0.1 | No fix listed |
| mozilla Thunderbird | = 24.1 | No fix listed |
| mozilla Thunderbird | = 24.1.1 | No fix listed |
| mozilla Thunderbird | = 24.2 | No fix listed |
| mozilla Thunderbird | = 24.3 | No fix listed |
| mozilla Thunderbird | = 24.4 | No fix listed |
| mozilla Thunderbird | = 24.5 | No fix listed |
| mozilla Thunderbird | = 24.6 | No fix listed |
| mozilla Thunderbird | = 24.7 | No fix listed |
| mozilla Thunderbird | = 31.0 | No fix listed |
References
- openSUSE-SU-2014:1098 vendor-advisory
- SUSE-SU-2014:1107 vendor-advisory
- SUSE-SU-2014:1112 vendor-advisory
- SUSE-SU-2014:1120 vendor-advisory
- openSUSE-SU-2015:0138 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- openSUSE-SU-2014:1099 vendor-advisory
- 60148 third-party-advisory
- 60186 third-party-advisory
- 61114 third-party-advisory
- 61390 third-party-advisory
- DSA-3018 vendor-advisory
- DSA-3028 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 69520 vdb-entry
- 1030793 vdb-entry
- 1030794 vdb-entry
- bugzilla.mozilla.org
- GLSA-201504-01 vendor-advisory