CVE-2014-8637

Published: Jan 14, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.

Affected (2)

Products: Mozilla: Seamonkey, Firefox

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Up to 2.31

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 34.0.5

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (38)

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html

Source: security@mozilla.org

http://secunia.com/advisories/62242

Source: security@mozilla.org

http://secunia.com/advisories/62250

Source: security@mozilla.org

http://secunia.com/advisories/62253

Source: security@mozilla.org

http://secunia.com/advisories/62316

Source: security@mozilla.org

http://secunia.com/advisories/62418

Source: security@mozilla.org

http://secunia.com/advisories/62446

Source: security@mozilla.org

http://secunia.com/advisories/62790

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2014/mfsa2015-02.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

http://www.securityfocus.com/bid/72048

Source: security@mozilla.org

http://www.securitytracker.com/id/1031533

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1094536

Source: security@mozilla.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/99957

Source: security@mozilla.org

https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62242

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62250

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62253

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62316

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62418

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62446

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62790

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2014/mfsa2015-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/72048

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031533

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=1094536

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/99957

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201504-01

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.