Cloudanix VulnDB

CVE-2014-1512

None

CVSS

—

EPSS

29.3%

Published

Mar 19, 2014

CISA due date

—

The record

Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.

Affected packages

Ecosystem Package Introduced Fixed
Debian:7 icedove 0 24.4.0-1~deb7u1
Debian:7 iceweasel 0 24.4.0esr-1~deb7u2
Mageia:3 firefox 0 24.4.0-1.mga3
Mageia:3 firefox-l10n 0 24.4.0-1.mga3
Mageia:3 iceape 0 2.25-1.mga3
Mageia:3 nspr 0 4.10.4-1.mga3
Mageia:3 nss 0 3.16.0-1.mga3
Mageia:3 rootcerts 0 20140318.00-1.mga3
Mageia:3 thunderbird 0 24.4.0-1.mga3
Mageia:3 thunderbird-l10n 0 24.4.0-1.mga3
Mageia:4 firefox 0 24.4.0-1.mga4
Mageia:4 firefox-l10n 0 24.4.0-1.mga4
Mageia:4 iceape 0 2.25-1.mga4
Mageia:4 nspr 0 4.10.4-1.mga4
Mageia:4 nss 0 3.16.0-1.mga4
Mageia:4 rootcerts 0 20140318.00-1.mga4
Mageia:4 thunderbird 0 24.4.0-1.mga4
Mageia:4 thunderbird-l10n 0 24.4.0-1.mga4
Red Hat:enterprise_linux:5::client firefox 0 0:24.4.0-1.el5_10
Red Hat:enterprise_linux:5::client firefox-debuginfo 0 0:24.4.0-1.el5_10
Red Hat:enterprise_linux:5::client thunderbird 0 0:24.4.0-1.el5_10
Red Hat:enterprise_linux:5::client thunderbird-debuginfo 0 0:24.4.0-1.el5_10
Red Hat:enterprise_linux:5::server firefox 0 0:24.4.0-1.el5_10
Red Hat:enterprise_linux:5::server firefox-debuginfo 0 0:24.4.0-1.el5_10
Red Hat:enterprise_linux:6::client firefox 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::client firefox-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::client thunderbird 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::client thunderbird-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::computenode firefox 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::computenode firefox-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::server firefox 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::server firefox-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::server thunderbird 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::server thunderbird-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::workstation firefox 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::workstation firefox-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::workstation thunderbird 0 0:24.4.0-1.el6_5
Red Hat:enterprise_linux:6::workstation thunderbird-debuginfo 0 0:24.4.0-1.el6_5
Red Hat:rhel_productivity:5 thunderbird 0 0:24.4.0-1.el5_10
Red Hat:rhel_productivity:5 thunderbird-debuginfo 0 0:24.4.0-1.el5_10
openSUSE:Tumbleweed MozillaFirefox 0 50.1.0-1.1
openSUSE:Tumbleweed MozillaThunderbird 0 45.5.1-1.1
openSUSE:Tumbleweed firefox-esr 0 128.5.1-1.1

Related vulnerabilities