Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-1508

CRITICAL · 9.1 CVSS Gepubliceerd: CWE-125

Beschrijving

The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering.

Vendors

Mozilla Redhat Debian Canonical Suse Opensuse

Affected products

Firefox Seamonkey Thunderbird Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Server Tus Enterprise Linux Workstation Debian Linux Ubuntu Linux Suse Linux Enterprise Software Development Kit Opensuse Suse Linux Enterprise Desktop Suse Linux Enterprise Server

References