CVE-2014-1564

Published: Sep 3, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.

Affected (7)

Products: Opensuse: Evergreen, Opensuse · Mozilla: Firefox, Thunderbird

2 products

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Evergreen	Version 11.4
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 31.1.0
Mozilla Firefox	Version 30.0
Mozilla Firefox	Version 31.0
Mozilla Thunderbird	Version 31.0

Related CWEs

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (32)

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Source: security@mozilla.org

Third Party Advisory

http://packetstormsecurity.com/files/128132/Mozilla-Firefox-Secret-Leak.html

Source: security@mozilla.org

http://seclists.org/fulldisclosure/2014/Sep/18

Source: security@mozilla.org

http://secunia.com/advisories/60148

Source: security@mozilla.org

http://secunia.com/advisories/61114

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2014/mfsa2014-69.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

http://www.securityfocus.com/archive/1/533357/100/0/threaded

Source: security@mozilla.org

http://www.securityfocus.com/bid/69525

Source: security@mozilla.org

http://www.securitytracker.com/id/1030793

Source: security@mozilla.org

http://www.securitytracker.com/id/1030794

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1045977

Source: security@mozilla.org

Issue Tracking

https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://packetstormsecurity.com/files/128132/Mozilla-Firefox-Secret-Leak.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2014/Sep/18

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/60148

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61114

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2014/mfsa2014-69.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/533357/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69525

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030793

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030794

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=1045977

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://security.gentoo.org/glsa/201504-01

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.