CVE-2014-1532 – cybernieuws.nl

Beschrijving NL

Use-after-free kwetsbaarheid in de nsHostResolver:: ConditionallyRefreshRecord-functie in libxul.so in Mozilla Firefox vóór 29.0, Firefox ESR 24.x vóór 24.5, Thunderbird vóór 24.5 en SeaMonkey vóór 2.26 staat externe aanvallers toe om willekeurige code uit te voeren of een denial of service (heap memory corruption) te veroorzaken via vectoren met betrekking tot hostresolutie.

Origineel (Engels) tonen

Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.

Vendors

Mozilla Fedoraproject Canonical Debian Redhat Opensuse Suse

Affected products

Firefox Seamonkey Thunderbird Fedora Ubuntu Linux Debian Linux Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Server Tus Enterprise Linux Workstation Opensuse Suse Linux Enterprise Server

Beschrijving NL

Vendors

Affected products

References