Mozilla Firefox, SeaMonkey vulnerabilities

6 known CVE vulnerabilities in Mozilla Firefox, SeaMonkey, translated and rated.

CVE-2014-8636High
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter. This may allow remote attackers to execute arbitrary JavaScript code with chrome privileges.
CVE-2014-8635High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 35.0 and SeaMonkey before version 2.32 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2014-1525High
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted VIDEO element in an HTML document.
CVE-2014-1522High
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service via crafted content.
CVE-2014-1519High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2014-1494High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code.