CVE-2014-1587 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 82%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 ≤ 31.2
mozilla	firefox	𝑥 ≤ 33.0
mozilla	seamonkey	𝑥 ≤ 2.30
mozilla	thunderbird	𝑥 ≤ 31.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

firefox

lucid	ignored
precise	Fixed 34.0+build2-0ubuntu0.12.04.1 released
trusty	Fixed 34.0+build2-0ubuntu0.14.04.1 released
utopic	Fixed 34.0+build2-0ubuntu0.14.10.1 released

thunderbird

lucid	ignored
precise	Fixed 1:31.3.0+build1-0ubuntu0.12.04.1 released
trusty	Fixed 1:31.3.0+build1-0ubuntu0.14.04.1 released
utopic	Fixed 1:31.3.0+build1-0ubuntu0.14.10.1 released

openSUSE / SLES Releases

openSUSE Product

Release

MozillaFirefox

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 12 SP5	68.1.0-109.92.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 12 SP5	68.1.0-109.92.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaFirefox-branding-SLE

suse enterprise sap 12	31.0-9.1 fixed
suse enterprise server 12	31.0-9.1 fixed

MozillaFirefox-devel

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise desktop 15 SP7	102.12.0-150200.152.90.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise sap 15 SP7	102.12.0-150200.152.90.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise server 15 SP7	102.12.0-150200.152.90.1 fixed

MozillaFirefox-translations-common

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 12 SP5	68.1.0-109.92.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 12 SP5	68.1.0-109.92.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaFirefox-translations-other

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaThunderbird

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise desktop 15 SP1	60.6.1-3.28.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.80.2 fixed
suse enterprise desktop 15 SP3	78.10.0-8.23.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise sap 15 SP1	60.6.1-3.28.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.80.2 fixed
suse enterprise sap 15 SP3	78.10.0-8.23.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise server 15 SP1	60.6.1-3.28.1 fixed
suse enterprise server 15 SP2	68.8.0-3.80.2 fixed
suse enterprise server 15 SP3	78.10.0-8.23.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise workstation 15	52.8-1.2 fixed
suse enterprise workstation 15 SP1	60.6.1-3.28.1 fixed
suse enterprise workstation 15 SP2	68.8.0-3.80.2 fixed
suse enterprise workstation 15 SP3	78.10.0-8.23.1 fixed
suse enterprise workstation 15 SP4	91.8.0-150200.8.65.1 fixed

MozillaThunderbird-devel

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise workstation 15	52.8-1.2 fixed

MozillaThunderbird-translations-common

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise desktop 15 SP1	60.6.1-3.28.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.80.2 fixed
suse enterprise desktop 15 SP3	78.10.0-8.23.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise sap 15 SP1	60.6.1-3.28.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.80.2 fixed
suse enterprise sap 15 SP3	78.10.0-8.23.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise server 15 SP1	60.6.1-3.28.1 fixed
suse enterprise server 15 SP2	68.8.0-3.80.2 fixed
suse enterprise server 15 SP3	78.10.0-8.23.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise workstation 15	52.8-1.2 fixed
suse enterprise workstation 15 SP1	60.6.1-3.28.1 fixed
suse enterprise workstation 15 SP2	68.8.0-3.80.2 fixed
suse enterprise workstation 15 SP3	78.10.0-8.23.1 fixed
suse enterprise workstation 15 SP4	91.8.0-150200.8.65.1 fixed

MozillaThunderbird-translations-other

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise desktop 15 SP1	60.6.1-3.28.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.80.2 fixed
suse enterprise desktop 15 SP3	78.10.0-8.23.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise sap 15 SP1	60.6.1-3.28.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.80.2 fixed
suse enterprise sap 15 SP3	78.10.0-8.23.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise server 15 SP1	60.6.1-3.28.1 fixed
suse enterprise server 15 SP2	68.8.0-3.80.2 fixed
suse enterprise server 15 SP3	78.10.0-8.23.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise workstation 15	52.8-1.2 fixed
suse enterprise workstation 15 SP1	60.6.1-3.28.1 fixed
suse enterprise workstation 15 SP2	68.8.0-3.80.2 fixed
suse enterprise workstation 15 SP3	78.10.0-8.23.1 fixed
suse enterprise workstation 15 SP4	91.8.0-150200.8.65.1 fixed

libfreebl3

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libfreebl3-32bit

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libfreebl3-hmac

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libfreebl3-hmac-32bit

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libsoftokn3

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libsoftokn3-32bit

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libsoftokn3-hmac

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

libsoftokn3-hmac-32bit

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

mozilla-nss

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

mozilla-nss-32bit

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

mozilla-nss-certs

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

mozilla-nss-certs-32bit

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

mozilla-nss-tools

suse enterprise sap 12	3.17.2-12.4 fixed
suse enterprise server 12	3.17.2-12.4 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

firefox

RHEL 6	0:31.3.0-3.el6_6 fixed
RHEL 7	0:31.3.0-3.el7_0 fixed

thunderbird

RHEL 6

0:31.3.0-1.el6_6

fixed

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

http://www.debian.org/security/2014/dsa-3090

http://www.debian.org/security/2014/dsa-3092

http://www.mozilla.org/security/announce/2014/mfsa2014-83.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

http://www.securityfocus.com/bid/71391

https://bugzilla.mozilla.org/show_bug.cgi?id=1042567

https://bugzilla.mozilla.org/show_bug.cgi?id=1072847

https://bugzilla.mozilla.org/show_bug.cgi?id=1079729

https://bugzilla.mozilla.org/show_bug.cgi?id=1080312

https://bugzilla.mozilla.org/show_bug.cgi?id=1089207

https://security.gentoo.org/glsa/201504-01