← Back to CVEs

CVE-2014-1563

N/A

Description

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.

CVE Details

CVSS v3.1 ScoreN/A

Published9/3/2014

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

mozilla:firefoxmozilla:thunderbirdopensuse:evergreenopensuse:opensuseoracle:solaris

Weaknesses (CWE)

CWE-416

References

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html(security@mozilla.org)

http://secunia.com/advisories/60148(security@mozilla.org)

http://secunia.com/advisories/61114(security@mozilla.org)

http://www.mozilla.org/security/announce/2014/mfsa2014-68.html(security@mozilla.org)

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(security@mozilla.org)

http://www.securityfocus.com/bid/69523(security@mozilla.org)

http://www.securitytracker.com/id/1030793(security@mozilla.org)

http://www.securitytracker.com/id/1030794(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1018524(security@mozilla.org)

https://security.gentoo.org/glsa/201504-01(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/60148(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/61114(af854a3a-2127-422b-91ae-364da2661108)

http://www.mozilla.org/security/announce/2014/mfsa2014-68.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/69523(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1030793(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1030794(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=1018524(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/201504-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.