CVE-2014-1562
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x...
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2014-1562- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2014-1562- Updated
- 2026-11-02
EUVDEUVD-2014-1638 No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2014-1638- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3xqm-48xm-6r9w No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x...
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-3xqm-48xm-6r9w- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2014-0372 No score
Updated firefox & thunderbird packages fix security vulnerabilities
Updated firefox and thunderbird packages fix security vulnerabilities:
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1562, CVE-2014-1567).
- Record
MGASA-2014-0372- Updated
- 2026-11-02
OSVMGASA-2014-0419 No score
Updated iceape package fixes security vulnerabilities
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1533)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1534)
The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. (CVE-2014-1536)
Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1537)
Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1538)
Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1540)
Use-after-free vulnerability in the RefreshDriverTimer::Tick*Driver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1541)
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate. (CVE-2014-1542)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1547)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1548)
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering. (CVE-2014-1549)
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering. (CVE-2014-1550)
Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization. (CVE-2014-1561)
Use-after-free vulnerability in the nsDocLoader::OnProgress function in…
- Record
MGASA-2014-0419- Updated
- 2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1562 No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
UBUNTU-CVE-2014-1562- Updated
- 2026-11-02
OSVUSN-2329-1 No score
firefox vulnerabilities
Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman, JW Wang and David Weir discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1553, CVE-2014-1554, CVE-2014-1562)
Abhishek Arya discovered a use-after-free during DOM interactions with SVG. If a user were tricked in to opening a specially crafted page, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1563)
Michal Zalewski discovered that memory is not initialized properly during GIF rendering in some circumstances. If a user were tricked in to opening a specially crafted page, an attacker could potentially exploit this to steal confidential information. (CVE-2014-1564)
Holger Fuhrmannek discovered an out-of-bounds read in Web Audio. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or steal confidential information. (CVE-2014-1565)
A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1567)
- Record
USN-2329-1- Updated
- 2026-11-02
OSVUSN-2330-1 No score
thunderbird vulnerabilities
Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman and JW Wang discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1553, CVE-2014-1562)
Abhishek Arya discovered a use-after-free during DOM interactions with SVG. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1563)
Michal Zalewski discovered that memory is not initialized properly during GIF rendering in some circumstances. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to steal confidential information. (CVE-2014-1564)
Holger Fuhrmannek discovered an out-of-bounds read in Web Audio. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or steal confidential information. (CVE-2014-1565)
A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1567)
- Record
USN-2330-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:7 From an advisory covering 2 CVEs |
before 24.8.0esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 45 moreShow less11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1 |
24.8.0esr-1~deb7u1 |
icedoveDebian:7 From an advisory covering 2 CVEs |
before 24.8.0-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.10-1 Show 29 moreShow less17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-224.6.0-1~deb7u124.7.0-1~deb7u1 |
24.8.0-1~deb7u1 |
rootcertsMageia:3 From an advisory covering 2 CVEs |
before 20140805.00-1.mga3 | 20140805.00-1.mga3 |
nsprMageia:3 From an advisory covering 2 CVEs |
before 4.10.7-1.mga3 | 4.10.7-1.mga3 |
nssMageia:3 From an advisory covering 2 CVEs |
before 3.17.0-1.mga3 | 3.17.0-1.mga3 |
firefoxMageia:3 From an advisory covering 2 CVEs |
before 24.8.0-1.mga3 | 24.8.0-1.mga3 |
firefox-l10nMageia:3 From an advisory covering 2 CVEs |
before 24.8.0-1.mga3 | 24.8.0-1.mga3 |
thunderbirdMageia:3 From an advisory covering 2 CVEs |
before 24.8.0-1.mga3 | 24.8.0-1.mga3 |
thunderbird-l10nMageia:3 From an advisory covering 2 CVEs |
before 24.8.0-1.mga3 | 24.8.0-1.mga3 |
rootcertsMageia:4 From an advisory covering 2 CVEs |
before 20140805.00-1.mga4 | 20140805.00-1.mga4 |
Show 54 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nsprMageia:4 From an advisory covering 2 CVEs |
before 4.10.7-1.mga4 | 4.10.7-1.mga4 |
nssMageia:4 From an advisory covering 2 CVEs |
before 3.17.0-1.mga4 | 3.17.0-1.mga4 |
firefoxMageia:4 From an advisory covering 2 CVEs |
before 24.8.0-1.mga4 | 24.8.0-1.mga4 |
firefox-l10nMageia:4 From an advisory covering 2 CVEs |
before 24.8.0-1.mga4 | 24.8.0-1.mga4 |
thunderbirdMageia:4 From an advisory covering 2 CVEs |
before 24.8.0-1.mga4 | 24.8.0-1.mga4 |
thunderbird-l10nMageia:4 From an advisory covering 2 CVEs |
before 24.8.0-1.mga4 | 24.8.0-1.mga4 |
iceapeMageia:3 From an advisory covering 39 CVEs |
before 2.30-1.mga3 | 2.30-1.mga3 |
iceapeMageia:4 From an advisory covering 39 CVEs |
before 2.30-1.mga4 | 2.30-1.mga4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:24.8.0-2.el5_10 | 0:24.8.0-2.el5_10 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:24.8.0-2.el5_10 | 0:24.8.0-2.el5_10 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:24.8.0-2.el5_10 | 0:24.8.0-2.el5_10 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:24.8.0-2.el5_10 | 0:24.8.0-2.el5_10 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
firefox-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
firefoxRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
firefox-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
firefoxRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
firefox-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el7_0 | 0:24.8.0-1.el7_0 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el5_10 | 0:24.8.0-1.el5_10 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el5_10 | 0:24.8.0-1.el5_10 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 0:24.8.0-1.el5_10 | 0:24.8.0-1.el5_10 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 0:24.8.0-1.el5_10 | 0:24.8.0-1.el5_10 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:24.8.0-1.el6_5 | 0:24.8.0-1.el6_5 |
firefoxUbuntu:14.04:LTS |
before 32.0+build1-0ubuntu0.14.04.1, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1 Show 4 moreShow less28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.1 |
32.0+build1-0ubuntu0.14.04.1 |
thunderbirdUbuntu:14.04:LTS |
before 1:31.1.1+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 4 moreShow less1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.1 |
1:31.1.1+build1-0ubuntu0.14.04.1 |
firefoxUbuntu:14.04:LTS From an advisory covering 7 CVEs |
before 32.0+build1-0ubuntu0.14.04.1, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1 Show 4 moreShow less28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.1 |
32.0+build1-0ubuntu0.14.04.1 |
thunderbirdUbuntu:14.04:LTS From an advisory covering 6 CVEs |
before 1:31.1.1+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 4 moreShow less1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.1 |
1:31.1.1+build1-0ubuntu0.14.04.1 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1562 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published September 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.58%, the 92nd percentile. Fixed in firefox 32.0+build1-0ubuntu0.14.04.1.
References
lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
securityfocus.com/bid/69519
bugzilla.mozilla.org/show_bug.cgi?id=1054359
security.gentoo.org/glsa/201504-01
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
Show 194 moreShow less
debian.org/security/2014/dsa-3018
securitytracker.com/id/1030794
mozilla.org/security/announce/2014/mfsa2014-67.html
secunia.com/advisories/60186
nvd.nist.gov/vuln/detail/CVE-2014-1562
github.com/advisories/GHSA-3xqm-48xm-6r9w
advisories.mageia.org/MGASA-2014-0372.html
bugs.mageia.org/show_bug.cgi?id=14043
rhn.redhat.com/errata/RHSA-2014-1144.html
access.redhat.com/errata/RHSA-2014:1144
bugzilla.redhat.com/show_bug.cgi?id=1135862
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1144.json
cve.org/CVERecord?id=CVE-2014-1562
ubuntu.com/security/CVE-2014-1562
suse.com/security/cve/CVE-2008-5913
Left out here: 27 versions, 802 references and the rest of 1 source description. The JSON record has them.