PT-2014-4245

CVE-2014-1593

·

Published

2014-10-26

·

Updated

2024-12-12

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 34.0 Firefox ESR versions prior to 31.3 Thunderbird versions prior to 31.3 SeaMonkey versions prior to 2.31
Description A stack-based buffer overflow issue exists in the mozilla::FileBlockCache::Read function, allowing remote attackers to execute arbitrary code via crafted media content.
Recommendations For Mozilla Firefox versions prior to 34.0, update to version 34.0 or later. For Firefox ESR versions prior to 31.3, update to version 31.3 or later. For Thunderbird versions prior to 31.3, update to version 31.3 or later. For SeaMonkey versions prior to 2.31, update to version 2.31 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2014-2301
ALT-PU-2014-2319
ALT-PU-2014-2449
ALT-PU-2015-1464
CESA-2014_1919
CESA-2014_1924
DSA-3090-1
DSA-3092-1
MGASA-2014-0507
MGASA-2014-0518
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2014:1919
RHSA-2014_1919
RHSA-2014:1924
RHSA-2014_1924
USN-2424-1
USN-2428-1
Found an issue in the description? Have something to add? Feel free to write us 👾