CVE-2014-1537: mozilla firefox

CVSS: 10.0v2.0HighModified

AliasesUBUNTU-CVE-2014-1537

Published 11-06-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-1537 is a high (CVSS 10.0) vulnerability in mozilla firefox. EPSS estimates a 4.80% chance of exploitation in the next 30 days, higher than 91.8% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

4.80%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 3

MGASA-2014-0419 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1 USN-2243-1

Timeline

11-06-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

4.80%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.80% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.80%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla1 product

firefox≤ 29.0.1

Ubuntu1 product

firefox< 30.0+build1-0ubuntu0.14.04.3

2 vendors · 2 products

References

24 links

secunia.com/advisories/59229Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-updates/2014-06/msg00040.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/59387Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id/1030388VDB EntryX Refsource SECTRACK
secunia.com/advisories/59052Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-updates/2014-07/msg00001.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.htmlVendor AdvisoryX Refsource SUSE
www.mozilla.org/security/announce/2014/mfsa2014-49.htmlX Refsource CONFIRMVendor AdvisoryREPORT
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOO

Show all 24 references

secunia.com/advisories/59866Third Party AdvisoryX Refsource SECUNIA
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRM
lists.opensuse.org/opensuse-updates/2014-07/msg00004.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/bid/67971VDB EntryX Refsource BID
secunia.com/advisories/59377Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2243-1Vendor AdvisoryX Refsource UBUNTU
www.securitytracker.com/id/1030386VDB EntryX Refsource SECTRACK
secunia.com/advisories/59425Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59171Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=999274X Refsource CONFIRM
secunia.com/advisories/59486Third Party AdvisoryX Refsource SECUNIA
ubuntu.com/security/CVE-2014-1537REPORT
www.cve.org/CVERecord?id=CVE-2014-1537REPORT
ubuntu.com/security/notices/USN-2243-1Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities