Home > Vulnerability Database > CVE-2014-8637

Mend.io Vulnerability Database

CVE-2014-8637

Date: January 14, 2015

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.

Severity Score

5.6

Related Resources (22)

Url: http://secunia.com/advisories/62316

Url: http://www.securityfocus.com/bid/72048

Url: http://secunia.com/advisories/62418

Url: http://www.mozilla.org/security/announce/2014/mfsa2015-02.html

Url: http://www.securitytracker.com/id/1031533

Url: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-8637

Url: http://secunia.com/advisories/62250

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1094536

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2014-8637

Url: http://secunia.com/advisories/62790

Url: http://secunia.com/advisories/62242

Url: http://secunia.com/advisories/62253

Url: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/99957

Url: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html

Url: https://security.gentoo.org/glsa/201504-01

Url: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Url: http://secunia.com/advisories/62446

Url: https://www.mend.io/vulnerability-database/CVE-2014-8637

Severity Score

5.6

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2014-8637

Date: January 14, 2015

Severity Score

Related Resources (22)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?