← Back

CVE-2014-1595

nvd nist
Published: Dec 11, 2014Modified: May 6, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.

Affected (6)

Mozilla
3 products
Firefox
Firefox Esr
Thunderbird
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 31.0
Firefox
Version 31.1.0
Firefox
Version 31.1.1
Firefox Esr
Version 31.2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Thunderbird
Up to 31.2
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Firefox
Up to 33.0
Running on/withPlatform Versions
Apple
Mac Os X
Version 10.10.0

Related CWEs

CWE-199
CWE-199

References (12)

Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.