CVE-2014-1488

published 2014-02-06

CVE-2014-1488: The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
mozilla	firefox	< 27.0	27.0
mozilla	seamonkey	< 2.24	2.24
opensuse	opensuse	—	—
opensuse	opensuse	—	—
oracle	solaris	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—
suse	linux_enterprise_software_development_kit	—	—