Total vulnerabilities in the database
Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
Software | From | Fixed in |
---|---|---|
opensuse / evergreen | 11.4 | 11.4.x |
opensuse / opensuse | 12.3 | 12.3.x |
opensuse / opensuse | 13.1 | 13.1.x |
oracle / solaris | 11.3 | 11.3.x |
mozilla / firefox | - | 31.1.0.x |
mozilla / firefox | 31.0 | 31.0.x |
mozilla / thunderbird | 31.0 | 31.0.x |
mozilla / firefox | 30.0 | 30.0.x |
mozilla / firefox_esr | 31.0 | 31.0.x |