CRITICAL: CVE-2014-1538 (CVSS 10) — mozilla firefox

CVE: CVE-2014-1538

CVSS: 10 (2.0) — AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: CRITICAL

Status: Critical advisory

Affected

• mozilla firefox
• mozilla firefox esr
• mozilla thunderbird

Summary

Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE

References

• http://linux.oracle.com/errata/ELSA-2014-0741.html
• http://linux.oracle.com/errata/ELSA-2014-0742.html
• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html
• http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
• http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
• http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html
• http://rhn.redhat.com/errata/RHSA-2014-0741.html
• http://rhn.redhat.com/errata/RHSA-2014-0742.html
• http://secunia.com/advisories/58984

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._