Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1541 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://www.securityfocus.com/bid/6
advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://www.securityfocus.com/bid/67979 - http://rhn.redhat.com/errata/RHSA-2014-0741.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://secunia.com/advisories/59150 - http://www.securitytracker.com/id/1030388 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - http://secunia.com/advisories/59169 - http://secunia.com/advisories/59165 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/adv
sories/59169 - http://secunia.com/advisories/59165 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://linux.oracle.com/errata/ELSA-2014-0742.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://www.mozilla.org/security/announce/2014/mfsa2014-52.html - http://secunia.com/advisories/59377 - http://secunia.com/advisories/59149 - http://rhn.redhat.com/errata/RHSA-2014-0742.html - http://www.ubuntu.com/usn/USN-2243-1 - http://www.debian.org/security/2014/dsa-2960 - http://www.debian.org/security/2014/dsa-2955 - https://bugzilla.mozilla.org/show_bug.
ebian.org/security/2014/dsa-2960 - http://www.debian.org/security/2014/dsa-2955 - https://bugzilla.mozilla.org/show_bug.cgi?id=1000185 - http://www.securitytracker.com/id/1030386 - http://linux.oracle.com/errata/ELSA-2014-0741.html - http://secunia.com/advisories/58984 - http://secunia.com/advisories/59170 - http://secunia.com/advisories/59425 - http://secunia.com/advisories/59171 - http://secunia.com/advisories/59328 - http://secunia.com/advisories/59275 - http://www.ubuntu.com/usn/USN-2250-1 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1542 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://secunia.com/advisories/59387 - http://www.securitytracker.com/id/1030388 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg000
tracker.com/id/1030388 - http://secunia.com/advisories/59052 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - https://bugzilla.mozilla.org/show_bug.cgi?id=991533 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-53.html - http://www.securityfocus.com/bid/67968 - http://www.ubuntu.com/usn/USN-2243-1 - http://secunia.com/advisories/59171 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1543 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://secunia.com/advisories/59387 - http://www.mozilla.org/security/announce/2014/mfsa2014-54.html - http://www.securitytracker.com/id/1030388 -
ies/59387 - http://www.mozilla.org/security/announce/2014/mfsa2014-54.html - http://www.securitytracker.com/id/1030388 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1011859 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/67969 - http://secunia.com/advisories/59171 - http://secunia.com/advisories/59486
CVE ID: CVE-2014-1544 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://se
m Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://secunia.com/advisories/59719 - http://secunia.com/advisories/60083 - http://www.securityfocus.com/bid/68816 - http://www.mozilla.org/security/announce/2014/mfsa2014-63.html - http://secunia.com/advisories/60621 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030617 - http://www.debian.org/security/2014/dsa-2996 - https://bugzilla.mozilla.org/show_bug.cgi?id=963150 - http://secunia.com/advisories/60486 - http://secunia.com/advisories/60628 - http://www.debian.org/
w_bug.cgi?id=963150 - http://secunia.com/advisories/60486 - http://secunia.com/advisories/60628 - http://www.debian.org/security/2014/dsa-2986 - http://secunia.com/advisories/59760 - http://secunia.com/advisories/59591
CVE ID: CVE-2014-1545 State: PUBLISHED Published: 2014-06-11T10:00:00 Last Updated: 2024-08-06T09:42:36.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://secunia.com/advisories/59229 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg0
.opensuse.org/opensuse-updates/2014-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html - http://secunia.com/advisories/59387 - http://www.securityfocus.com/bid/67975 - https://bugzilla.mozilla.org/show_bug.cgi?id=1018783 - http://www.debian.org/security/2014/dsa-2962 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html - http://secunia.com/advisories/59614 - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030404 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-
4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html - http://secunia.com/advisories/59377 - http://www.mozilla.org/security/announce/2014/mfsa2014-55.html - https://bugzilla.redhat.com/show_bug.cgi?id=1107432 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://www.debian.org/security/2014/dsa-2960 - http://www.debian.org/security/2014/dsa-2955 - http://secunia.com/advisories/59318 - http://secunia.com/advisories/58984 - http://secunia.com/advisories/59425 - http://secunia.com/advisories/59275 - http://secunia.com/advisories/59486 - http://www.ubuntu.com/usn/USN-2265-1
CVE ID: CVE-2014-1546 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:36.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in Bugzilla 3.x and 4.x before 4.0.14, 4.1.x and 4.2.x before 4.2.10, 4.3.x and 4.4.x before 4.4.5, and 4.5.x before 4.5.5 accepts certain long callback values and does not restrict the initial bytes of a JSONP response, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted OBJECT element with SWF content consistent with the _bz_callback character set. Addition
tive information, via a crafted OBJECT element with SWF content consistent with the _bz_callback character set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532895 - https://bugzilla.mozilla.org/show_bug.cgi?id=1036213 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136369.html - http://advisories.mageia.org/MGASA-2014-0349.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:169 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136217.html - http://www.securitytracker.com/id/1030648
CVE ID: CVE-2014-1547 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59719 - https://bugzilla.mozilla.org/show_bug.cgi?id=985070 - http://secunia.com/advisories/60083 - http://secunia.com/advisories/60621 -
gzilla.mozilla.org/show_bug.cgi?id=985070 - http://secunia.com/advisories/60083 - http://secunia.com/advisories/60621 - https://bugzilla.mozilla.org/show_bug.cgi?id=1024765 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/60306 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://linux.oracle.com/errata/ELSA-2014-0918.html - http://www.securitytracker.com/id/1030620 - http://www.debian.org/security/2014/dsa-2996 - https://bugzilla.mozilla.org/show_bug.cgi?id=1012694 - http://www.securitytracker.com/id/1030619 - http://www.mozilla.org/security/announce/2014/mfsa2014-56.html - http://secunia.com/advisories/60486 - http://secunia.
- http://www.mozilla.org/security/announce/2014/mfsa2014-56.html - http://secunia.com/advisories/60486 - http://secunia.com/advisories/60628 - http://www.debian.org/security/2014/dsa-2986 - http://secunia.com/advisories/59760 - http://secunia.com/advisories/59591 - http://www.securityfocus.com/bid/68811 - https://bugzilla.mozilla.org/show_bug.cgi?id=1019684
CVE ID: CVE-2014-1548 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1013056 - https://bugzilla.mozilla.org/show_bug.cgi?id=1021240 - https://bugzilla.mozilla.org/show_bug.cgi?id=994444 - https://bugzilla.mozilla.org/show_b
.org/show_bug.cgi?id=1021240 - https://bugzilla.mozilla.org/show_bug.cgi?id=994444 - https://bugzilla.mozilla.org/show_bug.cgi?id=1022773 - http://secunia.com/advisories/59719 - https://bugzilla.mozilla.org/show_bug.cgi?id=1009675 - http://secunia.com/advisories/60083 - https://bugzilla.mozilla.org/show_bug.cgi?id=990096 - https://bugzilla.mozilla.org/show_bug.cgi?id=1028358 - https://bugzilla.mozilla.org/show_bug.cgi?id=1020219 - https://bugzilla.mozilla.org/show_bug.cgi?id=1035438 - http://secunia.com/advisories/60621 - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=1021969 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-295209
/bugzilla.mozilla.org/show_bug.cgi?id=1021969 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1002702 - http://www.securitytracker.com/id/1030620 - https://bugzilla.mozilla.org/show_bug.cgi?id=1034383 - https://bugzilla.mozilla.org/show_bug.cgi?id=1021312 - http://www.securitytracker.com/id/1030619 - https://bugzilla.mozilla.org/show_bug.cgi?id=1020041 - http://www.mozilla.org/security/announce/2014/mfsa2014-56.html - http://secunia.com/advisories/60628 - http://secunia.com/advisories/59760 - http://www.securityfocus.com/bid/68818 - https://bugzilla.mozilla.org/show_bug.cgi?id=1020008
CVE ID: CVE-2014-1549 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1020205 - https://security.gen
otes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1020205 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-57.html - http://www.securitytracker.com/id/1030620 - http://www.securitytracker.com/id/1030619 - http://www.securityfocus.com/bid/68820 - http://secunia.com/advisories/60628 - http://secunia.com/advisories/59760
CVE ID: CVE-2014-1550 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1020411 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http:/
rity.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030620 - http://www.securitytracker.com/id/1030619 - http://secunia.com/advisories/60628 - http://secunia.com/advisories/59760 - http://www.mozilla.org/security/announce/2014/mfsa2014-58.html
CVE ID: CVE-2014-1551 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytra
glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030620 - http://www.securitytracker.com/id/1030619 - https://bugzilla.mozilla.org/show_bug.cgi?id=1018234 - http://secunia.com/advisories/59760 - http://www.mozilla.org/security/announce/2014/mfsa2014-59.html
CVE ID: CVE-2014-1552 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=985135 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityt
g/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030620 - http://www.securitytracker.com/id/1030619 - http://www.mozilla.org/security/announce/2014/mfsa2014-66.html - http://secunia.com/advisories/60628 - http://secunia.com/advisories/59760
CVE ID: CVE-2014-1553 State: PUBLISHED Published: 2014-09-03T10:00:00 Last Updated: 2024-08-06T09:42:36.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1022945 - https://bugzilla.mozilla.org/sh
-announce/2015-01/msg00024.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1022945 - https://bugzilla.mozilla.org/show_bug.cgi?id=995075 - https://bugzilla.mozilla.org/show_bug.cgi?id=1027359 - https://bugzilla.mozilla.org/show_bug.cgi?id=1037666 - http://www.securityfocus.com/bid/69524 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030794 - http://www.mozilla.org/security/announce/2014/mfsa2014-67.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1033121 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://lists.opensuse.org/opensuse-secu
1 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html - http://secunia.com/advisories/60148 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1041148 - https://bugzilla.mozilla.org/show_bug.cgi?id=1035007 - http://secunia.com/advisories/61114 - http://www.securitytracker.com/id/1030793
CVE ID: CVE-2014-1554 State: PUBLISHED Published: 2014-09-03T10:00:00 Last Updated: 2024-08-06T09:42:36.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1004480 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html - http://www.securityfocus.com/bid/69526 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
sg00001.html - http://www.securityfocus.com/bid/69526 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=990247 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030794 - https://bugzilla.mozilla.org/show_bug.cgi?id=1016519 - http://www.mozilla.org/security/announce/2014/mfsa2014-67.html - http://secunia.com/advisories/62022 - http://secunia.com/advisories/62023 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=995704 - http://www.securitytracker.com/id/10
dates/2014-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=995704 - http://www.securitytracker.com/id/1030793
CVE ID: CVE-2014-1555 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68814 - http://secunia.com/advisories/59719 - http://secunia.com/advisories/60083 - http://secunia.com/advisories/60621 - https://security.gentoo.org/glsa/201504-01 - http:/
secunia.com/advisories/60083 - http://secunia.com/advisories/60621 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/60306 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://linux.oracle.com/errata/ELSA-2014-0918.html - http://www.securitytracker.com/id/1030620 - http://www.mozilla.org/security/announce/2014/mfsa2014-61.html - http://www.debian.org/security/2014/dsa-2996 - http://www.securitytracker.com/id/1030619 - http://secunia.com/advisories/60486 - https://bugzilla.mozilla.org/show_bug.cgi?id=1023121 - http://secunia.com/advisories/60628 - http://www.debian.org/security/2014/dsa-2986 - http://secunia.com/advisories/59760
ttp://secunia.com/advisories/60628 - http://www.debian.org/security/2014/dsa-2986 - http://secunia.com/advisories/59760 - http://secunia.com/advisories/59591
CVE ID: CVE-2014-1556 State: PUBLISHED Published: 2014-07-23T10:00:00 Last Updated: 2024-08-06T09:42:36.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-62.html - http://secunia.com/advisories/59719 - http://secunia.com/advisories/60083 - https://bugzilla.mozilla.org/show_bug.cgi?id=1028891 - http://www.securityfocus.com/bid/68822 - http://secunia.com/a