Use-After-Free Vulnerability in Mozilla Firefox and Related Products
CVE-2014-1532

9.8CRITICAL

Key Information:

Vendor: Mozilla
Status: Thunderbird; Firefox; Firefox Esr; Seamonkey
Vendor: CVE Published:; 30 April 2014

What is CVE-2014-1532?

This vulnerability is located in the nsHostResolver::ConditionallyRefreshRecord function within libxul.so, which affects various Mozilla products. It enables attackers to manipulate the way host resolutions are handled, leading to potential execution of arbitrary code or causing denial of service due to heap memory corruption. Users are urged to apply security updates to mitigate risks associated with this vulnerability.