[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-1556Date: (C)2014-07-28   (M)2024-03-27


Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1030619
SECTRACK-1030620
SECUNIA-59591
SECUNIA-59719
SECUNIA-59760
SECUNIA-60083
SECUNIA-60306
SECUNIA-60486
SECUNIA-60621
SECUNIA-60628
BID-68822
DSA-2986
DSA-2996
GLSA-201504-01
IAVM:2014-A-0113
http://linux.oracle.com/errata/ELSA-2014-0918.html
http://www.mozilla.org/security/announce/2014/mfsa2014-62.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1028891

CPE    20
cpe:/a:mozilla:firefox:30.0
cpe:/a:mozilla:firefox_esr:24.0.1
cpe:/a:mozilla:firefox_esr:24.1.0
cpe:/a:mozilla:firefox_esr:24.0.2
...
CWE    1
CWE-94
OVAL    21
oval:org.secpod.oval:def:1500638
oval:org.secpod.oval:def:20631
oval:org.secpod.oval:def:20619
oval:org.secpod.oval:def:501340
...

© SecPod Technologies