CVE-2014-1541
11.06.2014, 10:57
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | thunderbird | 𝑥 ≤ 24.5 |
| mozilla | thunderbird | 24.0 |
| mozilla | thunderbird | 24.0.1 |
| mozilla | thunderbird | 24.1 |
| mozilla | thunderbird | 24.1.1 |
| mozilla | thunderbird | 24.2 |
| mozilla | thunderbird | 24.3 |
| mozilla | thunderbird | 24.4 |
| mozilla | firefox | 𝑥 ≤ 29.0.1 |
| mozilla | firefox | 24.0 |
| mozilla | firefox | 24.1.0 |
| mozilla | firefox | 24.1.1 |
| mozilla | firefox_esr | 24.0.1 |
| mozilla | firefox_esr | 24.0.2 |
| mozilla | firefox_esr | 24.2 |
| mozilla | firefox_esr | 24.3 |
| mozilla | firefox_esr | 24.4 |
| mozilla | firefox_esr | 24.5 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||
| thunderbird |
|
References