CVE-2014-1496

published 2014-03-19

CVE-2014-1496: Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I H A N

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
mozilla	firefox	< 28.0	28.0
mozilla	firefox	>= 24.0 < 24.4	24.4
mozilla	seamonkey	< 2.25	2.25
mozilla	thunderbird	< 24.4	24.4
suse	suse_linux_enterprise_desktop	—	—
suse	suse_linux_enterprise_server	—	—
suse	suse_linux_enterprise_software_development_kit	—	—

CWE-269