CVE-2014-1494

Published: Mar 19, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected (10)

Products: Mozilla: Seamonkey, Firefox · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · Oracle: Solaris · +2 more

Show all products

Mozilla: Seamonkey, Firefox · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · Oracle: Solaris · Opensuse: Opensuse · Opensuse Project: Opensuse

2 products

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Before 2.25

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Software Development Kit	Version 11 sp3

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.3

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Project Opensuse	Version 11.4
Opensuse Project Opensuse	Version 12.3

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Before 28.0

References (32)

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://www.mozilla.org/security/announce/2014/mfsa2014-15.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=627295

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=909586

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=927579

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=932496

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=933219

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=938615

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=938626

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=949843

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=964462

Source: security@mozilla.org

Issue TrackingVendor Advisory

https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html