Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-1592

Опубликовано: 11 дек. 2014
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8

Описание

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.

РелизСтатусПримечание
devel

released

34.0+build2-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [34.0+build2-0ubuntu0.14.04.1]]
lucid

ignored

end of life
precise

released

34.0+build2-0ubuntu0.12.04.1
trusty

released

34.0+build2-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [34.0+build2-0ubuntu0.14.04.1]
upstream

released

34.0
utopic

released

34.0+build2-0ubuntu0.14.10.1

Показывать по

РелизСтатусПримечание
devel

released

1:31.3.0+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:31.3.0+build1-0ubuntu0.14.04.1]]
lucid

ignored

end of life
precise

released

1:31.3.0+build1-0ubuntu0.12.04.1
trusty

released

1:31.3.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:31.3.0+build1-0ubuntu0.14.04.1]
upstream

released

31.3.0
utopic

released

1:31.3.0+build1-0ubuntu0.14.10.1

Показывать по

EPSS

Процентиль: 82%
0.01768
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.

nvd
больше 10 лет назад

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.

debian
больше 10 лет назад

Use-after-free vulnerability in the nsHtml5TreeOperation function in x ...

github
больше 3 лет назад

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.

oracle-oval
больше 10 лет назад

ELSA-2014-1924: thunderbird security update (IMPORTANT)

EPSS

Процентиль: 82%
0.01768
Низкий

6.8 Medium

CVSS2