CVE-2014-1512

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 31%

probabilidade de exploração

31%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.

Produtos afetados

n/a · n/a

Referências

http://archives.neohapsis.com/archives/bugtraq/2014-03/0145.html http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html http://rhn.redhat.com/errata/RHSA-2014-0310.html http://rhn.redhat.com/errata/RHSA-2014-0316.html https://bugzilla.mozilla.org/show_bug.cgi?id=982957 https://security.gentoo.org/glsa/201504-01 http://www.debian.org/security/2014/dsa-2881 http://www.debian.org/security/2014/dsa-2911 http://www.mozilla.org/security/announce/2014/mfsa2014-30.html