CVE-2014-1553 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer10 documents7 sources

Severity

10.0CRITICALNVD

EPSS

0.6%

top 31.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mozilla Firefox Mozilla Thunderbird Opensuse Evergreen +1 more

Timeline

PublishedSep 3

Latest updateMay 14

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages6 packages

▶Ubuntumozilla/firefox< 32.0+build1-0ubuntu0.14.04.1

▶NVDmozilla/firefox31.1.0+2

▶Ubuntumozilla/thunderbird< 1:31.1.1+build1-0ubuntu0.14.04.1

▶NVDmozilla/thunderbird31.0

▶NVDopensuse/opensuse12.3, 13.1+1

🔴Vulnerability Details

GHSA

GHSA-rvvr-h4rh-2hm5: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32↗2022-05-14

▶

OSV

thunderbird vulnerabilities↗2014-09-11

▶

CVEList

CVE-2014-1553: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32↗2014-09-03

▶

OSV

firefox vulnerabilities↗2014-09-02

▶

OSV

CVE-2014-1553: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32↗2014-09-02

▶

📋Vendor Advisories

Ubuntu

Thunderbird vulnerabilities↗2014-09-11

▶

Red Hat

Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)↗2014-09-03

▶

Ubuntu

Firefox vulnerabilities↗2014-09-02

▶

💬Community

Bugzilla

CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)↗2014-09-01

▶