Mozilla プロジェクトによる報告：

MFSA 2014-15 様々なメモリ安全性の問題（rv:28.0 / rv:24.4）

MFSA 2014-16。更新中に抽出されるファイルは、必ずしも読み取り専用ではありません。

MFSA 2014-17。WAV ファイルのデコーディング中の領域外読み取り

MFSA 2014-18。crypto.generateCRMFRequest がキーのタイプを検証しません

MFSA 2014-19。WebRTC 権限プロンプトでのなりすまし攻撃

MFSA 2014-20。onbeforeunload および JavaScript ナビゲーションの DOS

MFSA 2014-21。新しいタブの Open Link によるローカルファイルアクセス

MFSA 2014-22。あるドメインから別のドメインでのレンダリングへの WebGL コンテンツのインジェクション

- MFSA 2014-23。データの Content Security Policy（CSP）：ドキュメントがセッションの復元用に保存されません

MFSA 2014-24。Android Crash Reporter が操作のために開かれます

MFSA 2014-25。Firefox OS DeviceStorageFile オブジェクトが相対パスエスケープに脆弱です

MFSA 2014-26。MathML でのポリゴンのレンダリングによる情報漏洩

MFSA 2014-27。PDF フォントのレンダリング中に Cairo で発生するメモリ破損

MFSA 2014-28。feDisplacementMap による SVG フィルターの情報漏洩

MFSA 2014-29。WebIDL 実装 API を利用する権限昇格

MFSA 2014-30。TypeObject での user-after-free

MFSA 2014-31。ArrayBuffer オブジェクトの中性化を通じた領域外の読み取り/書き込み

MFSA 2014-32。中性化後の TypedArrayObject を通じた領域外書き込み

Mozilla Thunderbird は 24.4.0 に更新されました。Mozilla SeaMonkey が 2.25 に更新されました。

- MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 さまざまなメモリ安全性の問題

- MFSA 2014-17/CVE-2014-1497（bmo#966311）WAV ファイルのデコーディング中の領域外の読み取り

- MFSA 2014-18/CVE-2014-1498（bmo#935618）crypto.generateCRMFRequest がキーのタイプを検証しません

- MFSA 2014-19/CVE-2014-1499（bmo#961512）WebRTC 権限プロンプトでのなりすまし攻撃

- MFSA 2014-20/CVE-2014-1500（bmo#956524）onbeforeunload および JavaScript ナビゲーション DOS

- MFSA 2014-22/CVE-2014-1502（bmo#972622）あるドメインから別のドメインでのレンダリングへの WebGL コンテンツインジェクション

- MFSA 2014-23/CVE-2014-1504（bmo#911547）データの Content Security Policy（CSP）：ドキュメントがセッションの復元用に保存されません

- MFSA 2014-26/CVE-2014-1508（bmo#963198）MathML でのポリゴンのレンダリングによる情報漏洩

- MFSA 2014-27/CVE-2014-1509（bmo#966021）PDF フォントレンダリング中に Cairo で発生するメモリ破損

- MFSA 2014-28/CVE-2014-1505（bmo#941887）feDisplacementMap による SVG フィルターの情報漏洩

- MFSA 2014-29/CVE-2014-1510/CVE-2014-1511（bmo#982906、bmo#982909）WebIDL を実装する API を使用する権限昇格

- MFSA 2014-30/CVE-2014-1512（bmo#982957）TypeObject での Use-after-free

- MFSA 2014-31/CVE-2014-1513（bmo#982974）ArrayBuffer オブジェクトの中性化を通じた領域外の読み込み/書き込み

- MFSA 2014-32/CVE-2014-1514（bmo#983344）中性化後の TypedArrayObject を通じた領域外の書き込み

SeaMonkey 2.25 is now patched against multiple vulnerabilities, the most critical of which include:

  - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access throuhg TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)

  - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)

  - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)

  - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)

  - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)

 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

Additionally, numerous other vulnerabilities have been patched. See reference links for details.

Mozilla Firefox ESR version 24.4 is now patched against multiple vulnerabilities, the most critical of which include:

 - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access through TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)
 - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)
 - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)
 - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)
 - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)

 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

Additionally, numerous other vulnerabilities have been patched. See reference links for details.

Versions of Mozilla Firefox prior to 28.0 have been patched against multiple vulnerabilities, the most critical of which include:

 - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access through TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)
 - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)
 - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)
 - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)
 - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)

 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

Additionally, numerous other vulnerabilities have been patched. See reference links for details.

Versions of Mozilla Thunderbird prior to 24.4 are prone to the following vulnerabilities :

 - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access through TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)
 - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)
 - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)
 - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)
 - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)
 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

ID	Name	Product	Family	Published	Updated	Severity
73111	FreeBSD：mozilla -- 複数の脆弱性（610de647-af8d-11e3-a25b-b4b52fce4ce8）	Nessus	FreeBSD Local Security Checks	3/20/2014	1/6/2021	critical
75333	openSUSE セキュリティ更新：MozillaThunderbird/seamonkey（openSUSE-SU-2014:0584-1）	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high
8172	SeaMonkey < 2.25 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/26/2014	3/6/2019	high
701243	Mozilla Firefox ESR < 24.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	11/6/2019	11/6/2019	high
8171	Mozilla Firefox < 28.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/26/2014	11/6/2019	high
8173	Mozilla Thunderbird < 24.4 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	3/26/2014	3/6/2019	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high