PT-2014-4245
CVE-2014-1593
·
Published
2014-10-26
·
Updated
2024-12-12
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 34.0
Firefox ESR versions prior to 31.3
Thunderbird versions prior to 31.3
SeaMonkey versions prior to 2.31
Description
A stack-based buffer overflow issue exists in the mozilla::FileBlockCache::Read function, allowing remote attackers to execute arbitrary code via crafted media content.
Recommendations
For Mozilla Firefox versions prior to 34.0, update to version 34.0 or later.
For Firefox ESR versions prior to 31.3, update to version 31.3 or later.
For Thunderbird versions prior to 31.3, update to version 31.3 or later.
For SeaMonkey versions prior to 2.31, update to version 2.31 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾