CVE-2014-8635
HighSummary
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 35.0 and SeaMonkey before version 2.32 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Risk Assessment
These vulnerabilities could lead to significant disruptions in application functionality and potentially allow an attacker to gain control over the system.
Recommendation
It is recommended to update Mozilla Firefox to version 35.0 or later and SeaMonkey to version 2.32 or later to mitigate the risks associated with these vulnerabilities.
Other vulnerabilities in Mozilla Firefox, SeaMonkey
See all- CVE-2014-8636High
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter. This may allow remote attackers to execute arbitrary JavaScript code with chrome privileges.
- CVE-2014-1525High
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted VIDEO element in an HTML document.
- CVE-2014-1522High
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service via crafted content.
- CVE-2014-1519High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- CVE-2014-1494High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code.
Original NVD description (English source)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.