CVE-2014-1524

NGHIÊM TRỌNG 9.8CVE-2014-1524 · Công bố 30/04/2014 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2014-1524 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 9.8) ảnh hưởng firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 7.7%, cao hơn 94.6% các lỗ hổng khác.
Cách xử lý: cập nhật lên 24.5, 29.0, 2.26 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
firefox mozilla	`≥ 24.0, < 24.5< 29.0`	`24.529.0`
seamonkey mozilla	`< 2.26`	`2.26`
thunderbird mozilla	`< 24.5`	`24.5`

Mô tả

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.

Tham khảo

lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html · Mailing List
lists.opensuse.org/opensuse-updates/2014-05/msg00010.html · Mailing List
lists.opensuse.org/opensuse-updates/2014-05/msg00013.html · Mailing List
lists.opensuse.org/opensuse-updates/2014-05/msg00033.html · Mailing List
lists.opensuse.org/opensuse-updates/2014-05/msg00040.html · Mailing List
rhn.redhat.com/errata/RHSA-2014-0448.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0449.html · Third Party Advisory
secunia.com/advisories/59866 · Broken Link
debian.org/security/2014/dsa-2918 · Third Party Advisory
debian.org/security/2014/dsa-2924 · Third Party Advisory
mozilla.org/security/announce/2014/mfsa2014-38.html · Vendor Advisory
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Third Party Advisory
securityfocus.com/bid/67131 · Third Party Advisory
securitytracker.com/id/1030163 · Third Party Advisory
securitytracker.com/id/1030164 · Third Party Advisory
securitytracker.com/id/1030165 · Third Party Advisory
ubuntu.com/usn/USN-2185-1 · Third Party Advisory
ubuntu.com/usn/USN-2189-1 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
security.gentoo.org/glsa/201504-01 · Third Party Advisory

Lỗ hổng khác của firefox

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí