CVE-2014-1578

EUVD-2014-1654
The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
31.0
mozillafirefox
31.1.0
mozillafirefox
𝑥
≤ 32.0
mozillafirefox
30.0
mozillafirefox
31.0
mozillafirefox
31.1.0
mozillathunderbird
31.0
mozillathunderbird
31.1.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libvpx
bookworm
1.12.0-1+deb12u3
fixed
bookworm (security)
1.12.0-1+deb12u3
fixed
bullseye
1.9.0-1+deb11u3
fixed
bullseye (security)
1.9.0-1+deb11u3
fixed
sid
1.14.1-1
fixed
squeeze
not-affected
trixie
1.14.1-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
lucid
ignored
precise
Fixed 33.0+build2-0ubuntu0.12.04.1
released
trusty
Fixed 33.0+build2-0ubuntu0.14.04.1
released
thunderbird
lucid
ignored
precise
Fixed 1:31.2.0+build2-0ubuntu0.12.04.1
released
trusty
Fixed 1:31.2.0+build2-0ubuntu0.14.04.1
released
References