Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=963962 - http://www.mozilla.org/security/announce/2014/mfsa2014-41.html - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1529 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.
//rhn.redhat.com/errata/RHSA-2014-0448.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=987003 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensus
866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - http://www.mozilla.org/security/announce/2014/mfsa2014-42.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securityfocus.com/bid/67135 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-ann
racker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1530 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html -
edhat.com/errata/RHSA-2014-0448.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://www.mozilla.org/security/announce/2014/mfsa2014-43.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/ope
s/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securityfocus.com/bid/67137 - http://www.securitytracker.com/id/1030164 - https://bugzilla.mozilla.org/show_bug.cgi?id=895557 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2
.cgi?id=895557 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1531 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http
Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://www.mozilla.org/security/announce/2014/mfsa2014-44.html - https://bugzilla.mozilla.org/show_bug.cgi?id=987140 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.co
g00015.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securityfocus.com/bid/67134 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker
2185-1 - http://www.securityfocus.com/bid/67134 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1532 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://www.mozilla.org/security/announce/2014/mfsa2014-46.
erences: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://www.mozilla.org/security/announce/2014/mfsa2014-46.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http:/
//secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securityfocus.com/bid/67130 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - https://bugzilla.mozilla.org/show_bug.cgi?id=966006 - http://lists.fedoraproject.org/piper
uritytracker.com/id/1030163 - https://bugzilla.mozilla.org/show_bug.cgi?id=966006 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1533 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1009952 - http://r
ts.opensuse.org/opensuse-updates/2014-06/msg00040.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1009952 - http://rhn.redhat.com/errata/RHSA-2014-0741.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://www.mozilla.org/security/announce/2014/mfsa2014-48.html - https://bugzilla.mozilla.org/show_bug.cgi?id=991981 - https://bugzilla.mozilla.org/show_bug.cgi?id=921622 - http://secunia.com/advisories/59150 - http://www.securitytracker.com/id/1030388 - https://bugzilla.mozilla.org/show_bug.cgi?id=988719 - https://bugzilla.mozilla.org/show_bug.cgi?id=999651 - https://bugzilla.mozilla.org/show_bug.cgi?id=1011007 - http
8719 - https://bugzilla.mozilla.org/show_bug.cgi?id=999651 - https://bugzilla.mozilla.org/show_bug.cgi?id=1011007 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - http://secunia.com/advisories/59169 - http://secunia.com/advisories/59165 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://linux.oracle.com/errata/ELSA-2014-0742.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - https://bugzilla.mozilla.org/show_bug.cgi?
742.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - https://bugzilla.mozilla.org/show_bug.cgi?id=967354 - https://bugzilla.mozilla.org/show_bug.cgi?id=978811 - http://secunia.com/advisories/59377 - http://secunia.com/advisories/59149 - http://rhn.redhat.com/errata/RHSA-2014-0742.html - http://www.ubuntu.com/usn/USN-2243-1 - http://www.debian.org/security/2014/dsa-2960 - http://www.debian.org/security/2014/dsa-2955 - http://www.securitytracker.com/id/1030386 - http://linux.oracle.com/errata/ELSA-2014-0741.html - https://bugzilla.mozilla.org/show_bug.cgi?id=992274 - https://bugzilla.mozilla.org/show_bug.cgi?id=995679 - http://secunia.com/advisories/58984 - http://secu
.cgi?id=992274 - https://bugzilla.mozilla.org/show_bug.cgi?id=995679 - http://secunia.com/advisories/58984 - http://secunia.com/advisories/59170 - http://secunia.com/advisories/59425 - https://bugzilla.mozilla.org/show_bug.cgi?id=994907 - http://www.securityfocus.com/bid/67965 - http://secunia.com/advisories/59171 - https://bugzilla.mozilla.org/show_bug.cgi?id=996715 - http://secunia.com/advisories/59328 - http://secunia.com/advisories/59275 - http://www.ubuntu.com/usn/USN-2250-1 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1534 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59229 - https://bugzilla.mozilla.org/show_bug.cgi?id=1000960 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1000598 - http://lists
pensuse.org/opensuse-updates/2014-06/msg00040.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1000598 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://www.mozilla.org/security/announce/2014/mfsa2014-48.html - https://bugzilla.mozilla.org/show_bug.cgi?id=996536 - http://www.securitytracker.com/id/1030388 - https://bugzilla.mozilla.org/show_bug.cgi?id=973874 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/598
security-announce/2014-06/msg00019.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - https://bugzilla.mozilla.org/show_bug.cgi?id=995817 - https://bugzilla.mozilla.org/show_bug.cgi?id=1007223 - http://secunia.com/advisories/59377 - http://www.ubuntu.com/usn/USN-2243-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=995816 - http://www.securitytracker.com/id/1030386 - https://bugzilla.mozilla.org/show_bug.cgi?id=990868 - https://bugzilla.mozilla.org/show_bug.cgi?id=969549 - http://secunia.com/advisories/59425
a.org/show_bug.cgi?id=990868 - https://bugzilla.mozilla.org/show_bug.cgi?id=969549 - http://secunia.com/advisories/59425 - https://bugzilla.mozilla.org/show_bug.cgi?id=978652 - http://secunia.com/advisories/59171 - https://bugzilla.mozilla.org/show_bug.cgi?id=969517 - https://bugzilla.mozilla.org/show_bug.cgi?id=1005578 - http://secunia.com/advisories/59486 - http://www.securityfocus.com/bid/67964 - https://bugzilla.mozilla.org/show_bug.cgi?id=1002340
CVE ID: CVE-2014-1536 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://www.securitytracker.com/id/103
se-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://www.securitytracker.com/id/1030388 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - http://www.mozilla.org/security/announce/2014/mfsa2014-49.html - http://www.securityfocus.com/bid/67966 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://secunia.com/advisories/59377 - http://www.ubunt
ttp://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://secunia.com/advisories/59377 - http://www.ubuntu.com/usn/USN-2243-1 - http://www.securitytracker.com/id/1030386 - http://secunia.com/advisories/59425 - http://secunia.com/advisories/59171 - https://bugzilla.mozilla.org/show_bug.cgi?id=989994 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1537 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 -
tml - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://www.securitytracker.com/id/1030388 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - http://www.mozilla.org/security/announce/2014/mfsa2014-49.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://www.securityfocus.com/bid/67971 - http://secunia.c
://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://www.securityfocus.com/bid/67971 - http://secunia.com/advisories/59377 - http://www.ubuntu.com/usn/USN-2243-1 - http://www.securitytracker.com/id/1030386 - http://secunia.com/advisories/59425 - http://secunia.com/advisories/59171 - https://bugzilla.mozilla.org/show_bug.cgi?id=999274 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1538 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://rhn.redhat.com/errata/RHSA-2014-0741.html - http://lists.opens
nsuse.org/opensuse-updates/2014-06/msg00040.html - http://rhn.redhat.com/errata/RHSA-2014-0741.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://secunia.com/advisories/59150 - http://www.securitytracker.com/id/1030388 - http://www.securityfocus.com/bid/67976 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - http://www.mozilla.org/security/announce/2014/mfsa2014-49.html - http://secunia.com/advisories/59169 - http://secunia.com/advisories/59165 - https://security.gentoo.org/glsa/2015
html - http://secunia.com/advisories/59169 - http://secunia.com/advisories/59165 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://linux.oracle.com/errata/ELSA-2014-0742.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://secunia.com/advisories/59377 - http://secunia.com/advisories/59149 - https://bugzilla.redhat.com/show_bug.cgi?id=1107421 - http://rhn.redhat.com/errata/RHSA-2014-0742.html - http://www.ubuntu.com/usn/USN-2243-1 - http://www.debian.org/security/2014/dsa-2960 - http://www.debian.org/security/2014/dsa-2955 - http://www.security
43-1 - http://www.debian.org/security/2014/dsa-2960 - http://www.debian.org/security/2014/dsa-2955 - http://www.securitytracker.com/id/1030386 - http://linux.oracle.com/errata/ELSA-2014-0741.html - http://secunia.com/advisories/58984 - http://secunia.com/advisories/59170 - https://bugzilla.mozilla.org/show_bug.cgi?id=1005584 - http://secunia.com/advisories/59425 - http://secunia.com/advisories/59171 - http://secunia.com/advisories/59328 - http://secunia.com/advisories/59275 - http://www.ubuntu.com/usn/USN-2250-1 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1539 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://secunia.com/advisories/59387 - http://www.securitytracker.com/id/1030388 - http://lists.opensuse.org/o
040.html - http://secunia.com/advisories/59387 - http://www.securitytracker.com/id/1030388 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://www.mozilla.org/security/announce/2014/mfsa2014-50.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/67967 - http://secunia.com/advisories/59171 - https://bugzilla.mozilla.org/show_bug.cgi?id=995603 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1540 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://www.securityfocus.com/bid/67978 - http://secunia.com/advisories/59387 - http://www.mozilla.org/security/an
html - http://www.securityfocus.com/bid/67978 - http://secunia.com/advisories/59387 - http://www.mozilla.org/security/announce/2014/mfsa2014-51.html - http://www.securitytracker.com/id/1030388 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2243-1 - http://secunia.com/advisories/59171 - http://secunia.com/advisories/59486 - https://bugzilla.mozilla.org/show_bug.cgi?id=978862