CVE-2014-1532

Critical

Published: 30/04/2014(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before version 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to unauthorized code execution or system destabilization through memory corruption.

Recommendation

It is recommended to update to the latest version of Mozilla Firefox, Firefox ESR, Thunderbird, and SeaMonkey to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.