PT-2014-1457
CVE-2014-1537
·
Published
2014-06-10
·
Updated
2024-06-15
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 30.0
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to a use-after-free vulnerability in the
mozilla::dom::workers::WorkerPrivateParent function. This vulnerability can lead to heap memory corruption.Recommendations
For versions prior to 30.0, update to version 30.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
mozilla::dom::workers::WorkerPrivateParent function until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾