CVE-2014-1562

CVSS V2 High 10 CVSS V3 None

Description

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Overview

CVE ID
CVE-2014-1562

Assigner
security@mozilla.org

Vulnerability Status
Modified

Published Version
2014-09-03T10:55:06

Last Modified Date
2017-01-07T02:59:40

Weakness Enumerations

CWE	URL
CWE-119	http://cwe.mitre.org/data/definitions/119.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version End
cpe:2.3:a:mozilla:firefox_esr:24.0:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.0.1:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.0.2:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.1.0:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.1.1:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.2:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.3:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.4:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.5:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.6:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:24.7:::::::*	1	OR
cpe:2.3:a:mozilla:firefox_esr:31.0:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.0:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.0.1:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.1:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.1.1:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.2:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.3:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.4:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.5:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.6:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:24.7:::::::*	1	OR
cpe:2.3:a:mozilla:thunderbird:31.0:::::::*	1	OR
cpe:2.3:a:mozilla:firefox::::::::	1	OR	31.1.0
cpe:2.3:a:mozilla:firefox:30.0:::::::*	1	OR
cpe:2.3:a:mozilla:firefox:31.0:::::::*	1	OR

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector
NETWORK

Access Compatibility
LOW

Authentication
NONE

Confidentiality Impact
COMPLETE

Integrity Impact
COMPLETE

Availability Impact
COMPLETE

Base Score
10

Severity
HIGH

Exploitability Score
10

Impact Score
10

References

Reference URL	Reference Tags
http://www.mozilla.org/security/announce/2014/mfsa2014-67.html	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1054359
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
http://www.debian.org/security/2014/dsa-3018
http://www.debian.org/security/2014/dsa-3028
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://www.securitytracker.com/id/1030794
http://www.securitytracker.com/id/1030793
http://www.securityfocus.com/bid/69519
http://secunia.com/advisories/61390
http://secunia.com/advisories/61114
http://secunia.com/advisories/60186
http://secunia.com/advisories/60148

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2014-1562
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1562

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 09:51:15				Added to TrackCVE
2022-12-02 00:26:28	2014-09-03T10:55Z	2014-09-03T10:55:06	CVE Published Date	updated
2022-12-02 00:26:28		2017-01-07T02:59:40	CVE Modified Date	updated
2022-12-02 00:26:28		Modified	Vulnerability Status	updated