Vulnerability DatabaseCVE-2014-1592
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2014-1592
December 11, 2014
Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
Related Resources (11)
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://www.debian.org/security/2014/dsa-3090
http://www.debian.org/security/2014/dsa-3092
http://www.securityfocus.com/bid/71398
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
https://access.redhat.com/security/cve/CVE-2014-1592
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
https://people.canonical.com/~ubuntu-security/cve/CVE-2014-1592
http://www.mozilla.org/security/announce/2014/mfsa2014-87.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1088635
https://security.gentoo.org/glsa/201504-01
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
CVSS v2
Base Score:
6.8
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
EPSS
Base Score:
1.77