CVE-2014-1518

8.8HIGH

Key Information:

Vendor
Mozilla
Status
Thunderbird
Firefox
Firefox Esr
Seamonkey
Vendor
CVE Published:
30 April 2014

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

http://rhn.redhat.com/errata/RHSA-2014-0448.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/67123
vdb-entryx_refsource_BID
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.