CVE-2014-1593

Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.

Score

CVSS 2.0 6.8 Medium

Status

Modified - security@mozilla.org

Published

2014-12-11

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Firefox (Mozilla)
• Seamonkey (Mozilla)
• Thunderbird (Mozilla)

References

• http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
• http://www.debian.org/security/2014/dsa-3090
• http://www.debian.org/security/2014/dsa-3092
• http://www.mozilla.org/security/announce/2014/mfsa2014-88.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
• http://www.securityfocus.com/bid/71395
• https://bugzilla.mozilla.org/show_bug.cgi?id=1085175
• https://security.gentoo.org/glsa/201504-01