CVE-2014-1493: canonical ubuntu_linux

CVSS: 10.0v2.0HighModified

Published 19-03-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-1493 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 8.10% chance of exploitation in the next 30 days, higher than 94.7% of scored vulnerabilities. 7 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

8.10%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits7reference

Advisory lineage

Upstream 0 · Downstream 9 · Related 3

DSA-2881-1 DSA-2911-1 MGASA-2014-0137 MGASA-2014-0146 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1+3 more

Timeline

19-03-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS metrics

2 scores · 1 source · 2 versions

v3.19.8v2.010.0

EPSS trend

Probability

8.10%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.10% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

7 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Show all 7 exploits

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Redhat7 products

Show all 7

Mozilla3 products

firefox< 28.0 | ≥ 24.0, < 24.4
seamonkey< 2.25
thunderbird< 24.4

Suse3 products

suse_linux_enterprise_desktop11:sp3
suse_linux_enterprise_server11:sp3
suse_linux_enterprise_software_development_kit11.0:sp3

Canonical1 product

ubuntu_linuxEOL12.04 | 12.10 | 13.10

Debian1 product

debian_linuxEOL7.0 | 8.0

Opensuse1 product

opensuseEOL11.4 | 12.3 | 13.1

6 vendors · 16 products

References

20 links

bugzilla.mozilla.org/show_bug.cgi?id=896268X Refsource CONFIRMExploitIssue TrackingVendor Advisory
www.securityfocus.com/bid/66412VDB EntryX Refsource BIDThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=967341X Refsource CONFIRMExploitIssue TrackingVendor Advisory
rhn.redhat.com/errata/RHSA-2014-0310.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2014/dsa-2911Vendor AdvisoryX Refsource DEBIANThird Party Advisory
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOOThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
www.ubuntu.com/usn/USN-2151-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mozilla.org/security/announce/2014/mfsa2014-15.htmlX Refsource CONFIRMVendor Advisory

Show all 20 references

www.debian.org/security/2014/dsa-2881Vendor AdvisoryX Refsource DEBIANThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=960145X Refsource CONFIRMExploitIssue TrackingVendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=965982X Refsource CONFIRMExploitIssue TrackingVendor Advisory
rhn.redhat.com/errata/RHSA-2014-0316.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=977538X Refsource CONFIRMExploitIssue TrackingVendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=963974X Refsource CONFIRMExploitIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=958867X Refsource CONFIRMExploitIssue TrackingVendor Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities