CVE-2014-1528

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
opensuseopensuse
13.1
opensuse_projectopensuse
12.3
oraclesolaris
11.3
mozillafirefox
28.0
mozillaseamonkey
2.25
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
trusty
Fixed 29.0+build1-0ubuntu0.14.04.2
released
saucy
Fixed 29.0+build1-0ubuntu0.13.10.3
released
quantal
Fixed 29.0+build1-0ubuntu0.12.10.3
released
precise
Fixed 29.0+build1-0ubuntu0.12.04.2
released
lucid
ignored