CVE-2014-1518

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
mozillafirefox
𝑥
< 29.0
mozillafirefox_esr
24.0 ≤
𝑥
< 24.5
mozillaseamonkey
𝑥
< 2.26
mozillathunderbird
𝑥
< 24.5
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
debiandebian_linux
7.0
debiandebian_linux
8.0
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.5
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
6.5
redhatenterprise_linux_server_eus
6.5
redhatenterprise_linux_server_tus
6.5
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
opensuseopensuse
11.4
opensuseopensuse
12.3
opensuseopensuse
13.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
trusty
Fixed 29.0+build1-0ubuntu0.14.04.2
released
saucy
Fixed 29.0+build1-0ubuntu0.13.10.3
released
quantal
Fixed 29.0+build1-0ubuntu0.12.10.3
released
precise
Fixed 29.0+build1-0ubuntu0.12.04.2
released
lucid
ignored
thunderbird
trusty
Fixed 1:24.5.0+build1-0ubuntu0.14.04.1
released
saucy
Fixed 1:24.5.0+build1-0ubuntu0.13.10.1
released
quantal
Fixed 1:24.5.0+build1-0ubuntu0.12.10.1
released
precise
Fixed 1:24.5.0+build1-0ubuntu0.12.04.1
released
lucid
ignored
References