PT-2014-4244 · Mozilla+5 · Firefox+8

Publicado

2014-10-26

·

Atualizado

2024-12-12

·

CVE-2014-1592

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 34.0 Firefox ESR 31.x versions prior to 31.3 Thunderbird versions prior to 31.3 SeaMonkey versions prior to 2.31
Description The issue allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing. This is due to a use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll.
Recommendations For Mozilla Firefox versions prior to 34.0, update to version 34.0 or later. For Firefox ESR 31.x versions prior to 31.3, update to version 31.3 or later. For Thunderbird versions prior to 31.3, update to version 31.3 or later. For SeaMonkey versions prior to 2.31, update to version 2.31 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2014-2301
ALT-PU-2014-2319
ALT-PU-2014-2449
ALT-PU-2015-1464
CESA-2014_1919
CESA-2014_1924
CVE-2014-1592
DSA-3090-1
DSA-3092-1
MGASA-2014-0507
MGASA-2014-0518
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2014:1919
RHSA-2014:1924
RHSA-2014_1919
RHSA-2014_1924
USN-2424-1
USN-2428-1

Produtos afetados

Alt Linux
Centos
Firefox Esr
Firefox
Red Hat
Seamonkey
Suse
Thunderbird
Ubuntu