CVE-2014-1477: canonical ubuntu_linux

CVSS: 9.8v3.1CriticalModified

Published 06-02-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-1477 is a critical (CVSS 9.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 5.51% chance of exploitation in the next 30 days, higher than 92.7% of scored vulnerabilities. 11 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

5.51%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits11reference

Advisory lineage

Upstream 0 · Downstream 8 · Related 3

DSA-2858-1 MGASA-2014-0036 MGASA-2014-0048 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1 OPENSUSE-SU-2024:14572-1+2 more

Timeline

06-02-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS metrics

2 scores · 1 source · 2 versions

v3.19.8v2.06.8

EPSS trend

Probability

5.51%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.51% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

11 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Show all 11 exploits

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat7 products

Show all 7

Mozilla3 products

firefox< 27.0 | ≥ 24.0, < 24.3
seamonkey< 2.24
thunderbird< 24.3

Suse3 products

suse_linux_enterprise_desktop11:sp3
suse_linux_enterprise_server11:sp3
suse_linux_enterprise_software_development_kit11.0:sp3

Canonical1 product

ubuntu_linuxEOL12.04 | 12.10 | 13.10

Debian1 product

debian_linuxEOL7.0

Fedoraproject1 product

fedoraEOL19 | 20

Opensuse1 product

opensuseEOL11.4 | 12.3 | 13.1

7 vendors · 17 products

References

42 links

www.ubuntu.com/usn/USN-2119-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
download.novell.com/Download?buildid=Y2fux-JW1QcX Refsource CONFIRMBroken Link
www.securitytracker.com/id/1029721VDB EntryX Refsource SECTRACKThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=950000X Refsource CONFIRMExploitIssue TrackingVendor Advisory
www.securitytracker.com/id/1029717VDB EntryX Refsource SECTRACKThird Party Advisory
www.mozilla.org/security/announce/2014/mfsa2014-01.htmlX Refsource CONFIRMVendor Advisory
8pecxstudios.com?page_id=44080X Refsource CONFIRMBroken LinkURL Repurposed
rhn.redhat.com/errata/RHSA-2014-0132.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=953114X Refsource CONFIRMExploitIssue TrackingVendor Advisory

Show all 42 references

secunia.com/advisories/56787Third Party AdvisoryX Refsource SECUNIABroken Link
www.securitytracker.com/id/1029720VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/56858Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2014/dsa-2858Vendor AdvisoryX Refsource DEBIANThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=945334X Refsource CONFIRMExploitIssue TrackingVendor Advisory
secunia.com/advisories/56763Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.mozilla.org/show_bug.cgi?id=925896X Refsource CONFIRMExploitIssue TrackingVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/90899VDB EntryX Refsource XFThird Party Advisory
www.ubuntu.com/usn/USN-2102-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-0133.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOOThird Party Advisory
www.securityfocus.com/bid/65317VDB EntryX Refsource BIDThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=950438X Refsource CONFIRMExploitIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=937132X Refsource CONFIRMExploitIssue TrackingVendor Advisory
download.novell.com/Download?buildid=VYQsgaFpQ2kX Refsource CONFIRMBroken Link
secunia.com/advisories/56888Third Party AdvisoryX Refsource SECUNIABroken Link
lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/56761Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.mozilla.org/show_bug.cgi?id=921470X Refsource CONFIRMExploitIssue TrackingVendor Advisory
osvdb.org/102864VDB EntryX Refsource OSVDBBroken Link
lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=937697X Refsource CONFIRMExploitIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=945939X Refsource CONFIRMExploitIssue Tracking
lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2102-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/56767Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/56706Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.mozilla.org/show_bug.cgi?id=951366X Refsource CONFIRMExploitIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=936808X Refsource CONFIRMExploitIssue TrackingVendor Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities