Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-1555

Опубликовано: 23 июл. 2014
Источник: ubuntu
Приоритет: medium
CVSS2: 9.3

Описание

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

РелизСтатусПримечание
devel

released

31.0~b9+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [31.0+build1-0ubuntu0.14.04.1]]
lucid

ignored

end of life
precise

released

31.0+build1-0ubuntu0.12.04.1
trusty

released

31.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [31.0+build1-0ubuntu0.14.04.1]
upstream

released

31.0

Показывать по

РелизСтатусПримечание
devel

released

1:31.0+build1-0ubuntu2
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:31.0+build1-0ubuntu0.14.04.1]]
lucid

ignored

end of life
precise

released

1:31.0+build1-0ubuntu0.12.04.1
trusty

released

1:31.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:31.0+build1-0ubuntu0.14.04.1]
upstream

released

31.0

Показывать по

9.3 Critical

CVSS2

Связанные уязвимости

redhat
около 11 лет назад

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

nvd
около 11 лет назад

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

debian
около 11 лет назад

Use-after-free vulnerability in the nsDocLoader::OnProgress function i ...

github
больше 3 лет назад

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

fstec
около 11 лет назад

Уязвимость программного обеспечения Thunderbird, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

9.3 Critical

CVSS2