CVE-2014-1567
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/09/2014
Last modified:
12/04/2025
Description
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
Impact
Base Score 2.0
9.30
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | 31.1.0 (including) | |
| cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:24.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:24.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:24.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox_esr:24.7:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
- http://secunia.com/advisories/60148
- http://secunia.com/advisories/60186
- http://secunia.com/advisories/61114
- http://secunia.com/advisories/61390
- http://www.debian.org/security/2014/dsa-3018
- http://www.debian.org/security/2014/dsa-3028
- http://www.mozilla.org/security/announce/2014/mfsa2014-72.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/69520
- http://www.securitytracker.com/id/1030793
- http://www.securitytracker.com/id/1030794
- https://bugzilla.mozilla.org/show_bug.cgi?id=1037641
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
- http://secunia.com/advisories/60148
- http://secunia.com/advisories/60186
- http://secunia.com/advisories/61114
- http://secunia.com/advisories/61390
- http://www.debian.org/security/2014/dsa-3018
- http://www.debian.org/security/2014/dsa-3028
- http://www.mozilla.org/security/announce/2014/mfsa2014-72.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/69520
- http://www.securitytracker.com/id/1030793
- http://www.securitytracker.com/id/1030794
- https://bugzilla.mozilla.org/show_bug.cgi?id=1037641
- https://security.gentoo.org/glsa/201504-01