Browse CVEs

MEDIUM 6.4 CVE-2014-1577 The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.… Firefox after 32.0 Fix from $1,6002014-10-15 MEDIUM 5.0 CVE-2014-1580 Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from pr… Firefox after 32.0 Fix from $1,6002014-10-15 MEDIUM 5.0 CVE-2014-1583 The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers … Firefox after 32.0 Fix from $1,6002014-10-15 HIGH 10.0 CVE-2014-1553EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before … Firefox after 31.1.0 Fix from $1,9502014-09-03 HIGH 10.0 CVE-2014-1554EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory… Firefox after 31.1.0 Fix from $1,9502014-09-03 HIGH 10.0 CVE-2014-1562EPSS 6% Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24… Firefox after 31.1.0 Fix from $1,9502014-09-03 HIGH 10.0 CVE-2014-1563EPSS 6% Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thun… Firefox after 31.1.0 Fix from $1,9502014-09-03 HIGH 9.3 CVE-2014-1567 Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunde… Firefox after 31.1.0 Fix from $1,9502014-09-03 MEDIUM 5.0 CVE-2014-1565 The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and T… Firefox after 31.1.0 Fix from $1,6002014-09-03 HIGH 10.0 CVE-2014-1551 Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 9.3 CVE-2014-1555 Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird be… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 9.3 CVE-2014-1556 Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted W… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 9.3 CVE-2014-1557 The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does no… Firefox after 30.0 Fix from $1,9502014-07-23 MEDIUM 5.8 CVE-2014-1552 Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote at… Firefox after 30.0 Fix from $1,6002014-07-23 MEDIUM 5.8 CVE-2014-1561 Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to al… Firefox after 30.0 Fix from $1,6002014-07-23 HIGH 10.0 CVE-2014-1544EPSS 6% Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 10.0 CVE-2014-1547EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 … Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 10.0 CVE-2014-1548EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 10.0 CVE-2014-1550 Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execut… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 9.3 CVE-2014-1549EPSS 6% The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not prope… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 10.0 CVE-2014-1545EPSS 6% Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds … Netscape Portable Runtime after 4.10.5 Fix from $1,9502014-06-11 HIGH 7.5 CVE-2014-1543 Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers t… Firefox after 29.0.1 Fix from $1,9502014-06-11 MEDIUM 6.8 CVE-2014-1542EPSS 5% Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code vi… Firefox after 29.0.1 Fix from $1,6002014-06-11 HIGH 10.0 CVE-2014-1533EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 … Firefox after 29.0.1 Fix from $1,9502014-06-11 HIGH 10.0 CVE-2014-1534EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory… Firefox after 29.0.1 Fix from $1,9502014-06-11 HIGH 10.0 CVE-2014-1536EPSS 6% The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a den… Firefox after 29.0.1 Fix from $1,9502014-06-11 HIGH 10.0 CVE-2014-1537 Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to exe… Firefox after 29.0.1 Fix from $1,9502014-06-11 HIGH 10.0 CVE-2014-1538 Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbi… Firefox after 29.0.1 Fix from $1,9502014-06-11 HIGH 10.0 CVE-2014-1541 Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox … Firefox after 29.0.1 Fix from $1,9502014-06-11 HIGH 9.3 CVE-2014-1540 Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox bef… Firefox after 29.0.1 Fix from $1,9502014-06-11