CVE-2014-1538: mozilla firefox

CVSS: 10.0v2.0HighModified

AliasesUBUNTU-CVE-2014-1538

Published 11-06-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-1538 is a high (CVSS 10.0) vulnerability in mozilla firefox. EPSS estimates a 4.91% chance of exploitation in the next 30 days, higher than 92% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

4.91%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 4

DSA-2955-1 DSA-2960-1 MGASA-2014-0260 MGASA-2014-0419 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1+4 more

Timeline

11-06-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

4.91%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.91% on 20-09-2026

20-09-202620-10-2026

EPSS score

4.91%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla3 products

firefox≤ 29.0.1 | 24.0 | 24.0.1 | 24.0.2 | 24.1.0 | 24.1.1
firefox_esr24.2 | 24.3 | 24.4 | 24.5
thunderbird≤ 24.5 | 24.0 | 24.0.1 | 24.1 | 24.1.1 | 24.2 | 24.3 | 24.4

Ubuntu2 products

firefox< 30.0+build1-0ubuntu0.14.04.3
thunderbird< 1:24.6.0+build1-0ubuntu0.14.04.1

2 vendors · 5 products

References

41 links

secunia.com/advisories/59229Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-updates/2014-06/msg00040.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2014-0741.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/59387Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59150Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id/1030388VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/67976VDB EntryX Refsource BID
secunia.com/advisories/59052Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-updates/2014-07/msg00001.htmlVendor AdvisoryX Refsource SUSE

Show all 41 references

lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.htmlVendor AdvisoryX Refsource SUSE
www.mozilla.org/security/announce/2014/mfsa2014-49.htmlX Refsource CONFIRMVendor AdvisoryREPORT
secunia.com/advisories/59169Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59165Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOO
secunia.com/advisories/59866Third Party AdvisoryX Refsource SECUNIA
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRM
linux.oracle.com/errata/ELSA-2014-0742.htmlX Refsource CONFIRM
lists.opensuse.org/opensuse-updates/2014-07/msg00004.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/59377Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59149Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=1107421X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2014-0742.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/USN-2243-1Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2014/dsa-2960Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2014/dsa-2955Vendor AdvisoryX Refsource DEBIAN
www.securitytracker.com/id/1030386VDB EntryX Refsource SECTRACK
linux.oracle.com/errata/ELSA-2014-0741.htmlX Refsource CONFIRM
secunia.com/advisories/58984Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59170Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=1005584X Refsource CONFIRM
secunia.com/advisories/59425Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59171Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59328Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59275Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2250-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/59486Third Party AdvisoryX Refsource SECUNIA
ubuntu.com/security/CVE-2014-1538REPORT
ubuntu.com/security/notices/USN-2243-1Advisory
ubuntu.com/security/notices/USN-2250-1Advisory
www.cve.org/CVERecord?id=CVE-2014-1538REPORT

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities