CRITICAL: CVE-2014-1519 (CVSS 9.3) — mozilla firefox

CVE: CVE-2014-1519

CVSS: 9.3 (2.0) — AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: CRITICAL

Status: Critical advisory

Affected

• mozilla firefox
• mozilla seamonkey
• canonical ubuntu linux
• opensuse opensuse
• fedoraproject fedora

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE

References

• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
• http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
• http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
• http://secunia.com/advisories/59866
• http://www.mozilla.org/security/announce/2014/mfsa2014-34.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.securitytracker.com/id/1030163
• http://www.securitytracker.com/id/1030164
• http://www.ubuntu.com/usn/USN-2185-1

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._