CVE-2014-1594

CWE-20 — Improper Input ValidationCWE-7498 documents7 sources
Severity
6.8MEDIUM
EPSS
1.7%
top 17.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedDec 11
Latest updateMay 17

Description

Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages5 packages

▶NVDmozilla/firefox31.2+1
▶Ubuntufirefox< 34.0+build2-0ubuntu0.14.04.1
▶Ubuntuthunderbird< 1:31.3.0+build1-0ubuntu0.14.04.1

🔴Vulnerability Details

3
GHSA
GHSA-5276-6fhc-x292: Mozilla Firefox before 34↗2022-05-17
▶
CVEList
CVE-2014-1594: Mozilla Firefox before 34↗2014-12-11
▶
OSV
CVE-2014-1594: Mozilla Firefox before 34↗2014-12-02
▶

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities↗2014-12-03
▶
Red Hat
Mozilla: Bad casting from the BasicThebesLayer to BasicContainerLayer (MFSA 2014-89)↗2014-12-02
▶
Ubuntu
Firefox vulnerabilities↗2014-12-02
▶

💬Community

1
Bugzilla
CVE-2014-1594 Mozilla: Bad casting from the BasicThebesLayer to BasicContainerLayer (MFSA 2014-89)↗2014-12-01
▶