CVE-2014-1478: canonical ubuntu_linux Out-of-bounds Write

CVSS: 10.0v2.0HighModified

Published 06-02-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-1478 is a high (CVSS 10.0) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 6.97% chance of exploitation in the next 30 days, higher than 94% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

6.97%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 2

MGASA-2014-0048 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1

Timeline

06-02-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey, and unknown other vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

6.97%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.97% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Mozilla2 products

firefox< 27.0
seamonkey< 2.24

Canonical1 product

ubuntu_linuxEOL12.04 | 12.10 | 13.10

Opensuse1 product

opensuseEOL11.4 | 12.3 | 13.1

Oracle1 product

solarisEOL11.3

4 vendors · 5 products

References

39 links

www.securitytracker.com/id/1029721VDB EntryX Refsource SECTRACKThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=922603X Refsource CONFIRMIssue TrackingVendor Advisory
osvdb.org/102865VDB EntryX Refsource OSVDBBroken Link
lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.securityfocus.com/bid/65324VDB EntryX Refsource BIDThird Party Advisory
www.securitytracker.com/id/1029717VDB EntryX Refsource SECTRACKThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=946733X Refsource CONFIRMIssue TrackingVendor Advisory
www.mozilla.org/security/announce/2014/mfsa2014-01.htmlX Refsource CONFIRMVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=925308X Refsource CONFIRMIssue TrackingVendor Advisory
8pecxstudios.com?page_id=44080X Refsource CONFIRMBroken LinkURL Repurposed

Show all 39 references

bugzilla.mozilla.org/show_bug.cgi?id=911707X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/56922Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/56787Third Party AdvisoryX Refsource SECUNIABroken Link
www.securitytracker.com/id/1029720VDB EntryX Refsource SECTRACKThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=950452X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=938431X Refsource CONFIRMIssue TrackingVendor Advisory
www.ubuntu.com/usn/USN-2102-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOOThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=945585X Refsource CONFIRMIssue TrackingVendor Advisory
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=916635X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=867597X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=944321X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=942152X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=942940X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/56888Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.mozilla.org/show_bug.cgi?id=924348X Refsource CONFIRMIssue TrackingVendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=953373X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=911845X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=939472X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=932162X Refsource CONFIRMIssue TrackingVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/90900VDB EntryX Refsource XFThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2102-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/56767Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.mozilla.org/show_bug.cgi?id=944278X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=944851X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/56706Third Party AdvisoryX Refsource SECUNIABroken Link

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities