CVE-2014-1533
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2014-1533- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2014-1533- Updated
- 2026-11-02
EUVDEUVD-2014-1609 No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2014-1609- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxfp-fxv6-wm97 No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-mxfp-fxv6-wm97- Updated
- 2026-11-02
OSVMGASA-2014-0260 No score
Updated firefox & thunderbird packages fix multiple security vulnerabilities
Updated firefox and thunderbird packages fix security vulnerabilities:
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1533, CVE-2014-1538, CVE-2014-1541).
- Record
MGASA-2014-0260- Updated
- 2026-11-02
OSVMGASA-2014-0419 No score
Updated iceape package fixes security vulnerabilities
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1533)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1534)
The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. (CVE-2014-1536)
Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1537)
Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1538)
Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1540)
Use-after-free vulnerability in the RefreshDriverTimer::Tick*Driver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1541)
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate. (CVE-2014-1542)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1547)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1548)
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering. (CVE-2014-1549)
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering. (CVE-2014-1550)
Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization. (CVE-2014-1561)
Use-after-free vulnerability in the nsDocLoader::OnProgress function in…
- Record
MGASA-2014-0419- Updated
- 2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1533 No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
UBUNTU-CVE-2014-1533- Updated
- 2026-11-02
OSVUSN-2243-1 No score
firefox vulnerabilities
Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner, Benoit Jacob and Karl Tomlinson discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1533, CVE-2014-1534)
Abhishek Arya discovered multiple use-after-free and out-of-bounds read issues in Firefox. An attacker could potentially exploit these to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1536, CVE-2014-1537, CVE-2014-1538)
Tyson Smith and Jesse Schwartzentruber discovered a use-after-free in the event listener manager. An attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1540)
A use-after-free was discovered in the SMIL animation controller. An attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1541)
Holger Fuhrmannek discovered a buffer overflow in Web Audio. An attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1542)
- Record
USN-2243-1- Updated
- 2026-11-02
OSVUSN-2250-1 No score
thunderbird vulnerabilities
Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden and Kyle Huey discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1533)
Abhishek Arya discovered multiple use-after-free and out-of-bounds read issues in Thunderbird. If a user had enabled scripting, an attacker could potentially exploit these to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2014-1538)
A use-after-free was discovered in the SMIL animation controller. If a user had enabled scripting, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2014-1541)
- Record
USN-2250-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:7 From an advisory covering 4 CVEs |
before 24.6.0esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 45 moreShow less11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1 |
24.6.0esr-1~deb7u1 |
icedoveDebian:7 From an advisory covering 4 CVEs |
before 24.6.0-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.10-1 Show 27 moreShow less17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-2 |
24.6.0-1~deb7u1 |
rootcertsMageia:3 From an advisory covering 3 CVEs |
before 20140401.00-1.mga3 | 20140401.00-1.mga3 |
nsprMageia:3 From an advisory covering 3 CVEs |
before 4.10.6-1.mga3 | 4.10.6-1.mga3 |
nssMageia:3 From an advisory covering 3 CVEs |
before 3.16.1-1.mga3 | 3.16.1-1.mga3 |
firefoxMageia:3 From an advisory covering 3 CVEs |
before 24.6.0-1.mga3 | 24.6.0-1.mga3 |
firefox-l10nMageia:3 From an advisory covering 3 CVEs |
before 24.6.0-1.mga3 | 24.6.0-1.mga3 |
thunderbirdMageia:3 From an advisory covering 3 CVEs |
before 24.6.0-1.mga3 | 24.6.0-1.mga3 |
thunderbird-l10nMageia:3 From an advisory covering 3 CVEs |
before 24.6.0-1.mga3 | 24.6.0-1.mga3 |
rootcertsMageia:4 From an advisory covering 3 CVEs |
before 20140401.00-1.mga4 | 20140401.00-1.mga4 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nsprMageia:4 From an advisory covering 3 CVEs |
before 4.10.6-1.mga4 | 4.10.6-1.mga4 |
nssMageia:4 From an advisory covering 3 CVEs |
before 3.16.1-1.mga4 | 3.16.1-1.mga4 |
firefoxMageia:4 From an advisory covering 3 CVEs |
before 24.6.0-1.mga4 | 24.6.0-1.mga4 |
firefox-l10nMageia:4 From an advisory covering 3 CVEs |
before 24.6.0-1.mga4 | 24.6.0-1.mga4 |
thunderbirdMageia:4 From an advisory covering 3 CVEs |
before 24.6.0-1.mga4 | 24.6.0-1.mga4 |
thunderbird-l10nMageia:4 From an advisory covering 3 CVEs |
before 24.6.0-1.mga4 | 24.6.0-1.mga4 |
iceapeMageia:3 From an advisory covering 39 CVEs |
before 2.30-1.mga3 | 2.30-1.mga3 |
iceapeMageia:4 From an advisory covering 39 CVEs |
before 2.30-1.mga4 | 2.30-1.mga4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefoxRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
firefox-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
firefoxRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
firefox-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
firefoxRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
firefox-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunnerRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
xulrunner-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el7_0 | 0:24.6.0-1.el7_0 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs |
before 0:24.6.0-1.el5_10 | 0:24.6.0-1.el5_10 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:24.6.0-1.el6_5 | 0:24.6.0-1.el6_5 |
firefoxUbuntu:14.04:LTS |
before 30.0+build1-0ubuntu0.14.04.3, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu128.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.2 |
30.0+build1-0ubuntu0.14.04.3 |
thunderbirdUbuntu:14.04:LTS |
before 1:24.6.0+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu11:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.1 |
1:24.6.0+build1-0ubuntu0.14.04.1 |
firefoxUbuntu:14.04:LTS From an advisory covering 8 CVEs |
before 30.0+build1-0ubuntu0.14.04.3, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu128.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.2 |
30.0+build1-0ubuntu0.14.04.3 |
thunderbirdUbuntu:14.04:LTS From an advisory covering 3 CVEs |
before 1:24.6.0+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu11:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.1 |
1:24.6.0+build1-0ubuntu0.14.04.1 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1533 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published June 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.12%, the 93rd percentile. Fixed in firefox 30.0+build1-0ubuntu0.14.04.3.
References
secunia.com/advisories/59229
lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
bugzilla.mozilla.org/show_bug.cgi?id=1009952
rhn.redhat.com/errata/RHSA-2014-0741.html
lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html
secunia.com/advisories/59387
Show 194 moreShow less
mozilla.org/security/announce/2014/mfsa2014-48.html
bugzilla.mozilla.org/show_bug.cgi?id=991981
bugzilla.mozilla.org/show_bug.cgi?id=921622
secunia.com/advisories/59150
securitytracker.com/id/1030388
bugzilla.mozilla.org/show_bug.cgi?id=988719
bugzilla.mozilla.org/show_bug.cgi?id=999651
bugzilla.mozilla.org/show_bug.cgi?id=1011007
secunia.com/advisories/59052
lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html
secunia.com/advisories/59169
secunia.com/advisories/59165
security.gentoo.org/glsa/201504-01
secunia.com/advisories/59866
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
linux.oracle.com/errata/ELSA-2014-0742.html
lists.opensuse.org/opensuse-updates/2014-07/msg00004.html
bugzilla.mozilla.org/show_bug.cgi?id=967354
bugzilla.mozilla.org/show_bug.cgi?id=978811
secunia.com/advisories/59377
secunia.com/advisories/59149
rhn.redhat.com/errata/RHSA-2014-0742.html
ubuntu.com/usn/USN-2243-1
debian.org/security/2014/dsa-2960
debian.org/security/2014/dsa-2955
securitytracker.com/id/1030386
linux.oracle.com/errata/ELSA-2014-0741.html
bugzilla.mozilla.org/show_bug.cgi?id=992274
bugzilla.mozilla.org/show_bug.cgi?id=995679
secunia.com/advisories/58984
secunia.com/advisories/59170
secunia.com/advisories/59425
bugzilla.mozilla.org/show_bug.cgi?id=994907
securityfocus.com/bid/67965
secunia.com/advisories/59171
bugzilla.mozilla.org/show_bug.cgi?id=996715
secunia.com/advisories/59328
secunia.com/advisories/59275
ubuntu.com/usn/USN-2250-1
secunia.com/advisories/59486
nvd.nist.gov/vuln/detail/CVE-2014-1533
github.com/advisories/GHSA-mxfp-fxv6-wm97
advisories.mageia.org/MGASA-2014-0260.html
mozilla.org/security/announce/2014/mfsa2014-49.html
mozilla.org/security/announce/2014/mfsa2014-52.html
mozilla.org/security/known-vulnerabilities/firefoxESR.html
mozilla.org/security/known-vulnerabilities/thunderbird.html
bugs.mageia.org/show_bug.cgi?id=13515
advisories.mageia.org/MGASA-2014-0419.html
bugs.mageia.org/show_bug.cgi?id=14318
mozilla.org/security/announce/2014/mfsa2014-51.html
mozilla.org/security/announce/2014/mfsa2014-53.html
mozilla.org/security/announce/2014/mfsa2014-56.html
mozilla.org/security/announce/2014/mfsa2014-57.html
mozilla.org/security/announce/2014/mfsa2014-58.html
mozilla.org/security/announce/2014/mfsa2014-60.html
mozilla.org/security/announce/2014/mfsa2014-61.html
mozilla.org/security/announce/2014/mfsa2014-62.html
mozilla.org/security/announce/2014/mfsa2014-64.html
mozilla.org/security/announce/2014/mfsa2014-65.html
mozilla.org/security/announce/2014/mfsa2014-66.html
mozilla.org/security/announce/2014/mfsa2014-67.html
mozilla.org/security/announce/2014/mfsa2014-68.html
mozilla.org/security/announce/2014/mfsa2014-69.html
mozilla.org/security/announce/2014/mfsa2014-70.html
mozilla.org/security/announce/2014/mfsa2014-72.html
mozilla.org/security/announce/2014/mfsa2014-74.html
mozilla.org/security/announce/2014/mfsa2014-75.html
mozilla.org/security/announce/2014/mfsa2014-76.html
mozilla.org/security/announce/2014/mfsa2014-77.html
mozilla.org/security/announce/2014/mfsa2014-78.html
mozilla.org/security/announce/2014/mfsa2014-79.html
mozilla.org/security/announce/2014/mfsa2014-80.html
mozilla.org/security/announce/2014/mfsa2014-81.html
mozilla.org/security/announce/2014/mfsa2014-82.html
access.redhat.com/errata/RHSA-2014:0741
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1107399
bugzilla.redhat.com/show_bug.cgi?id=1107421
bugzilla.redhat.com/show_bug.cgi?id=1107424
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0741.json
access.redhat.com/security/cve/CVE-2014-1533
cve.org/CVERecord?id=CVE-2014-1533
access.redhat.com/security/cve/CVE-2014-1538
cve.org/CVERecord?id=CVE-2014-1538
nvd.nist.gov/vuln/detail/CVE-2014-1538
access.redhat.com/security/cve/CVE-2014-1541
cve.org/CVERecord?id=CVE-2014-1541
nvd.nist.gov/vuln/detail/CVE-2014-1541
access.redhat.com/errata/RHSA-2014:0742
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0742.json
ubuntu.com/security/CVE-2014-1533
ubuntu.com/security/notices/USN-2243-1
ubuntu.com/security/notices/USN-2250-1
ubuntu.com/security/CVE-2014-1534
ubuntu.com/security/CVE-2014-1536
ubuntu.com/security/CVE-2014-1537
ubuntu.com/security/CVE-2014-1538
ubuntu.com/security/CVE-2014-1540
ubuntu.com/security/CVE-2014-1541
ubuntu.com/security/CVE-2014-1542
launchpad.net/bugs/1326690
launchpad.net/bugs/1328003
suse.com/security/cve/CVE-2008-5913
suse.com/security/cve/CVE-2009-0040
suse.com/security/cve/CVE-2009-0652
suse.com/security/cve/CVE-2009-0771
suse.com/security/cve/CVE-2009-0772
suse.com/security/cve/CVE-2009-0773
suse.com/security/cve/CVE-2009-0774
suse.com/security/cve/CVE-2009-0775
suse.com/security/cve/CVE-2009-0776
suse.com/security/cve/CVE-2009-0777
suse.com/security/cve/CVE-2009-1044
suse.com/security/cve/CVE-2009-1169
suse.com/security/cve/CVE-2009-1302
suse.com/security/cve/CVE-2009-1303
suse.com/security/cve/CVE-2009-1304
suse.com/security/cve/CVE-2009-1305
suse.com/security/cve/CVE-2009-1306
suse.com/security/cve/CVE-2009-1307
suse.com/security/cve/CVE-2009-1308
suse.com/security/cve/CVE-2009-1309
suse.com/security/cve/CVE-2009-1310
suse.com/security/cve/CVE-2009-1311
suse.com/security/cve/CVE-2009-1312
suse.com/security/cve/CVE-2009-1313
suse.com/security/cve/CVE-2009-1563
suse.com/security/cve/CVE-2009-2470
suse.com/security/cve/CVE-2009-2654
suse.com/security/cve/CVE-2009-3069
suse.com/security/cve/CVE-2009-3070
suse.com/security/cve/CVE-2009-3071
suse.com/security/cve/CVE-2009-3072
suse.com/security/cve/CVE-2009-3073
suse.com/security/cve/CVE-2009-3074
suse.com/security/cve/CVE-2009-3075
suse.com/security/cve/CVE-2009-3077
suse.com/security/cve/CVE-2009-3078
suse.com/security/cve/CVE-2009-3079
suse.com/security/cve/CVE-2009-3274
suse.com/security/cve/CVE-2009-3370
suse.com/security/cve/CVE-2009-3371
suse.com/security/cve/CVE-2009-3372
suse.com/security/cve/CVE-2009-3373
suse.com/security/cve/CVE-2009-3374
suse.com/security/cve/CVE-2009-3375
suse.com/security/cve/CVE-2009-3376
suse.com/security/cve/CVE-2009-3377
suse.com/security/cve/CVE-2009-3378
suse.com/security/cve/CVE-2009-3379
suse.com/security/cve/CVE-2009-3380
suse.com/security/cve/CVE-2009-3381
suse.com/security/cve/CVE-2009-3383
suse.com/security/cve/CVE-2009-3388
suse.com/security/cve/CVE-2009-3389
suse.com/security/cve/CVE-2009-3555
suse.com/security/cve/CVE-2009-3979
suse.com/security/cve/CVE-2009-3980
suse.com/security/cve/CVE-2009-3982
suse.com/security/cve/CVE-2009-3983
suse.com/security/cve/CVE-2009-3984
suse.com/security/cve/CVE-2009-3985
suse.com/security/cve/CVE-2010-0164
suse.com/security/cve/CVE-2010-0165
suse.com/security/cve/CVE-2010-0166
suse.com/security/cve/CVE-2010-0167
suse.com/security/cve/CVE-2010-0168
suse.com/security/cve/CVE-2010-0169
suse.com/security/cve/CVE-2010-0170
suse.com/security/cve/CVE-2010-0171
suse.com/security/cve/CVE-2010-0172
suse.com/security/cve/CVE-2010-0173
suse.com/security/cve/CVE-2010-0174
suse.com/security/cve/CVE-2010-0176
suse.com/security/cve/CVE-2010-0177
suse.com/security/cve/CVE-2010-0178
suse.com/security/cve/CVE-2010-0181
suse.com/security/cve/CVE-2010-0182
suse.com/security/cve/CVE-2010-0654
suse.com/security/cve/CVE-2010-1028
suse.com/security/cve/CVE-2010-1121
suse.com/security/cve/CVE-2010-1125
suse.com/security/cve/CVE-2010-1196
suse.com/security/cve/CVE-2010-1197
suse.com/security/cve/CVE-2010-1198
suse.com/security/cve/CVE-2010-1199
suse.com/security/cve/CVE-2010-1200
suse.com/security/cve/CVE-2010-1201
suse.com/security/cve/CVE-2010-1202
suse.com/security/cve/CVE-2010-1203
suse.com/security/cve/CVE-2010-1205
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 25 versions, 2,009 references and the rest of 1 source description. The JSON record has them.