CVE Vulnerabilities

CVE-2014-1477

Published: Feb 06, 2014 | Modified: Aug 07, 2020
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla * 27.0 (excluding)
Firefox_esr Mozilla 24.0 (including) 24.3 (excluding)
Seamonkey Mozilla * 2.24 (excluding)
Thunderbird Mozilla * 24.3 (excluding)
Red Hat Enterprise Linux 5 RedHat firefox-0:24.3.0-2.el5_10 *
Red Hat Enterprise Linux 5 RedHat thunderbird-0:24.3.0-2.el5_10 *
Red Hat Enterprise Linux 6 RedHat firefox-0:24.3.0-2.el6_5 *
Red Hat Enterprise Linux 6 RedHat thunderbird-0:24.3.0-2.el6_5 *
Firefox Ubuntu lucid *
Firefox Ubuntu precise *
Firefox Ubuntu quantal *
Firefox Ubuntu saucy *
Firefox Ubuntu upstream *
Thunderbird Ubuntu devel *
Thunderbird Ubuntu lucid *
Thunderbird Ubuntu precise *
Thunderbird Ubuntu quantal *
Thunderbird Ubuntu saucy *
Thunderbird Ubuntu upstream *

References