CVE-2014-1563

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 32.0 Firefox ESR versions prior to 31.1 Thunderbird versions prior to 31.1

Description The issue is related to a use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service, specifically heap memory corruption, via an SVG animation that interacts with the DOM and triggers incorrect cycle collection.

Recommendations For Mozilla Firefox versions prior to 32.0, update to version 32.0 or later. For Firefox ESR versions prior to 31.1, update to version 31.1 or later. For Thunderbird versions prior to 31.1, update to version 31.1 or later.