CVE-2014-1567
CVE-2014-1567
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
EPSS 4,9% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
n/a
- Softwareversionen
- n/a: Betroffen
Keine Korrektur veröffentlicht
firefox Ubuntu:14.04:LTS
- Softwareversionen
- 24.0+build1-0ubuntu1
- 25.0+build3-0ubuntu0.13.10.1
- 28.0~b2+build1-0ubuntu2
- 28.0+build1-0ubuntu1
- 28.0+build2-0ubuntu1
- 28.0+build2-0ubuntu2
- 29.0+build1-0ubuntu0.14.04.2
- 30.0+build1-0ubuntu0.14.04.3
- 31.0+build1-0ubuntu0.14.04.1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 32.0+build1-0ubuntu0.14.04.1
Auf 32.0+build1-0ubuntu0.14.04.1 aktualisieren
thunderbird Ubuntu:14.04:LTS
- Softwareversionen
- 1:24.0+build1-0ubuntu1
- 1:24.0+build1-0ubuntu2
- 1:24.1.1+build1-0ubuntu0.13.10.1
- 1:24.1.1+build1-0ubuntu1
- 1:24.2.0+build1-0ubuntu1
- 1:24.4.0+build1-0ubuntu1
- 1:24.5.0+build1-0ubuntu0.14.04.1
- 1:24.6.0+build1-0ubuntu0.14.04.1
- 1:31.0+build1-0ubuntu0.14.04.1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1:31.1.1+build1-0ubuntu0.14.04.1
Auf 1:31.1.1+build1-0ubuntu0.14.04.1 aktualisieren
Originalquellen
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-72.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1037641
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
- http://www.securityfocus.com/bid/69520
- https://security.gentoo.org/glsa/201504-01
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.debian.org/security/2014/dsa-3018
- http://www.securitytracker.com/id/1030794
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://secunia.com/advisories/60186
- http://secunia.com/advisories/61390
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
- http://secunia.com/advisories/60148
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
- http://secunia.com/advisories/61114
- http://www.debian.org/security/2014/dsa-3028
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
- http://www.securitytracker.com/id/1030793
- https://nvd.nist.gov/vuln/detail/CVE-2014-1567