Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-1509

Опубликовано: 18 мар. 2014
Источник: redhat
CVSS2: 5.1
EPSS Низкий

Описание

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1077028Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)

EPSS

Процентиль: 73%
0.0081
Низкий

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 11 лет назад

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.

CVSS3: 8.8
nvd
больше 11 лет назад

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.

CVSS3: 8.8
debian
больше 11 лет назад

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo ...

CVSS3: 8.8
github
около 3 лет назад

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.

fstec
больше 11 лет назад

Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику выполнить произвольный код

EPSS

Процентиль: 73%
0.0081
Низкий

5.1 Medium

CVSS2