CVE-2014-1555

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 31.0 Firefox ESR 24.x versions prior to 24.7 Thunderbird versions prior to 24.7

Description The issue allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event, exploiting a use-after-free vulnerability in the nsDocLoader::OnProgress function.

Recommendations For Mozilla Firefox versions prior to 31.0, update to version 31.0 or later. For Firefox ESR 24.x versions prior to 24.7, update to version 24.7 or later. For Thunderbird versions prior to 24.7, update to version 24.7 or later.