CVE-2014-1486

NGHIÊM TRỌNG 9.8CVE-2014-1486 · Công bố 06/02/2014 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2014-1486 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 9.8) ảnh hưởng firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 7.0%, cao hơn 94.2% các lỗ hổng khác.
Cách xử lý: cập nhật lên 24.3, 27.0, 2.24 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
firefox mozilla	`≥ 24.0, < 24.3< 27.0`	`24.327.0`
seamonkey mozilla	`< 2.24`	`2.24`
thunderbird mozilla	`< 24.3`	`24.3`
suse linux enterprise software development kit suse	`= 11.0`	Chưa có bản vá

Mô tả

Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.

Tham khảo

download.novell.com/Download · Broken Link
download.novell.com/Download · Broken Link
lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html · Mailing List
osvdb.org/102872 · Broken Link
rhn.redhat.com/errata/RHSA-2014-0132.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0133.html · Third Party Advisory
secunia.com/advisories/56706 · Broken Link
secunia.com/advisories/56761 · Broken Link
secunia.com/advisories/56763 · Broken Link
secunia.com/advisories/56767 · Broken Link
secunia.com/advisories/56787 · Broken Link
secunia.com/advisories/56858 · Broken Link
secunia.com/advisories/56888 · Broken Link
secunia.com/advisories/56922 · Broken Link
debian.org/security/2014/dsa-2858 · Third Party Advisory
mozilla.org/security/announce/2014/mfsa2014-08.html · Vendor Advisory
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Third Party Advisory
securityfocus.com/bid/65334 · Third Party Advisory
securitytracker.com/id/1029717 · Third Party Advisory
securitytracker.com/id/1029720 · Third Party Advisory
securitytracker.com/id/1029721 · Third Party Advisory
ubuntu.com/usn/USN-2102-1 · Third Party Advisory
ubuntu.com/usn/USN-2102-2 · Third Party Advisory
ubuntu.com/usn/USN-2119-1 · Third Party Advisory
8pecxstudios.com · Broken Link
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/90890 · Third Party Advisory
security.gentoo.org/glsa/201504-01 · Third Party Advisory

Lỗ hổng khác của firefox

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí