CVE-2014-1494
HighSummary
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code.
Risk Assessment
These vulnerabilities may lead to significant disruptions in application functionality and allow attackers to gain control over the user's system.
Recommendation
It is recommended to update Mozilla Firefox to version 28.0 or later and SeaMonkey to version 2.25 or later to mitigate these vulnerabilities.
Other vulnerabilities in Mozilla Firefox, SeaMonkey
See all- CVE-2014-8636High
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter. This may allow remote attackers to execute arbitrary JavaScript code with chrome privileges.
- CVE-2014-8635High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 35.0 and SeaMonkey before version 2.32 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- CVE-2014-1525High
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted VIDEO element in an HTML document.
- CVE-2014-1522High
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service via crafted content.
- CVE-2014-1519High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Original NVD description (English source)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.