FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2014-1523

This CVE name corresponds to:

Entered Topic
2014-04-29 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2014-1523
Phase Assigned(20140116)

Description

Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2014/mfsa2014-37.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=969226
DEBIAN DSA-2918
DEBIAN DSA-2924
FEDORA FEDORA-2014-5829
FEDORA FEDORA-2014-5833
REDHAT RHSA-2014:0448
REDHAT RHSA-2014:0449
SUSE SUSE-SU-2014:0665
SUSE openSUSE-SU-2014:0602
SUSE openSUSE-SU-2014:0640
SUSE openSUSE-SU-2014:0599
SUSE openSUSE-SU-2014:0629
SUSE SUSE-SU-2014:0727
UBUNTU USN-2189-1
UBUNTU USN-2185-1
SECTRACK 1030163
SECTRACK 1030164
SECTRACK 1030165