CVE-2014-1593

Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.

Published: Dec 11, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-1593
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-119

Affected Software
References

Software	From	Fixed in
mozilla / firefox_esr	-	31.2.x
mozilla / firefox	-	33.0.x
mozilla / seamonkey	-	2.30.x
mozilla / thunderbird	-	31.2.x

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://www.debian.org/security/2014/dsa-3090
http://www.debian.org/security/2014/dsa-3092
http://www.mozilla.org/security/announce/2014/mfsa2014-88.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
http://www.securityfocus.com/bid/71395
https://bugzilla.mozilla.org/show_bug.cgi?id=1085175
https://security.gentoo.org/glsa/201504-01

Vulnerability Database

289,689

CVE-2014-1593