CVE-2014-1540

Severity

93%

Complexity

86%

Confidentiality

165%

Per http://cwe.mitre.org/data/definitions/416.html: "CWE-416: Use After Free"

Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.

Per http://cwe.mitre.org/data/definitions/416.html: "CWE-416: Use After Free"

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 10 years ago

2014-06-11 10:57:00

Last updated 7 years ago

2017-12-28 02:29:00

Affected Software

Mozilla Firefox

References

openSUSE-SU-2014:0819

openSUSE-SU-2014:0855

59052

59171

59387

59486

59866

http://www.mozilla.org/security/announce/2014/mfsa2014-51.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

67978

1030388

USN-2243-1

https://bugzilla.mozilla.org/show_bug.cgi?id=978862

GLSA-201504-01

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.