CVE-2014-1559

MEDIUM 4.3CVE-2014-1559 · Published 23/07/2014 · updated 17/06/2026

In short

CVE-2014-1559 is a MEDIUM (CVSS 4.3) vulnerability affecting firefox (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`≤ 30.0`	No fix yet
thunderbird mozilla	`= 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4= 24.5= 24.6≤ 24.7`	No fix yet

Description

Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.

References

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

≤ 30.0

No fix yet

thunderbird

mozilla

= 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4= 24.5= 24.6≤ 24.7

No fix yet

More vulnerabilities in firefox

See all →