CVE-2014-1567
CVE-2014-1567
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
EPSS 4,9% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
firefox Ubuntu:14.04:LTS
- Versiones
- 24.0+build1-0ubuntu1
- 25.0+build3-0ubuntu0.13.10.1
- 28.0~b2+build1-0ubuntu2
- 28.0+build1-0ubuntu1
- 28.0+build2-0ubuntu1
- 28.0+build2-0ubuntu2
- 29.0+build1-0ubuntu0.14.04.2
- 30.0+build1-0ubuntu0.14.04.3
- 31.0+build1-0ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 32.0+build1-0ubuntu0.14.04.1
Actualiza a 32.0+build1-0ubuntu0.14.04.1
thunderbird Ubuntu:14.04:LTS
- Versiones
- 1:24.0+build1-0ubuntu1
- 1:24.0+build1-0ubuntu2
- 1:24.1.1+build1-0ubuntu0.13.10.1
- 1:24.1.1+build1-0ubuntu1
- 1:24.2.0+build1-0ubuntu1
- 1:24.4.0+build1-0ubuntu1
- 1:24.5.0+build1-0ubuntu0.14.04.1
- 1:24.6.0+build1-0ubuntu0.14.04.1
- 1:31.0+build1-0ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:31.1.1+build1-0ubuntu0.14.04.1
Actualiza a 1:31.1.1+build1-0ubuntu0.14.04.1
Fuentes originales
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-72.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1037641
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
- http://www.securityfocus.com/bid/69520
- https://security.gentoo.org/glsa/201504-01
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.debian.org/security/2014/dsa-3018
- http://www.securitytracker.com/id/1030794
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://secunia.com/advisories/60186
- http://secunia.com/advisories/61390
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
- http://secunia.com/advisories/60148
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
- http://secunia.com/advisories/61114
- http://www.debian.org/security/2014/dsa-3028
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
- http://www.securitytracker.com/id/1030793
- https://nvd.nist.gov/vuln/detail/CVE-2014-1567