Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1562, CVE-2014-1567)

After installing the update, Firefox must be restarted for the changes to take effect.

MozillaThunderbird was updated to Thunderbird 31.1.0 (bnc#894370), fixinfg security issues :

  - MFSA 2014-67/CVE-2014-1553/CVE-2014-1562 Miscellaneous     memory safety hazards

  - MFSA 2014-68/CVE-2014-1563 (bmo#1018524) Use-after-free     during DOM interactions with SVG

  - MFSA 2014-69/CVE-2014-1564 (bmo#1045977) Uninitialized     memory use during GIF rendering

  - MFSA 2014-70/CVE-2014-1565 (bmo#1047831) Out-of-bounds     read in Web Audio audio timeline

  - MFSA 2014-72/CVE-2014-1567 (bmo#1037641) Use-after-free     setting text directionality

  - update to Thunderbird 31.0

  - based on Gecko 31

  - Autocompleting email addresses now matches against any     part of the name or email

  - Composing a mail to a newsgroup will now autocomplete     newsgroup names

  - Insecure NTLM (pre-NTLMv2) authentication disabled

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2330-1 advisory.

    Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman and JW Wang     discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially     crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of     service via application crash, or execute arbitrary code with the privileges of the user invoking     Thunderbird. (CVE-2014-1553, CVE-2014-1562)

    Abhishek Arya discovered a use-after-free during DOM interactions with SVG. If a user were tricked in to     opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to     cause a denial of service via application crash or execute arbitrary code with the privileges of the user     invoking Thunderbird. (CVE-2014-1563)

    Michal Zalewski discovered that memory is not initialized properly during GIF rendering in some     circumstances. If a user were tricked in to opening a specially crafted message, an attacker could     potentially exploit this to steal confidential information. (CVE-2014-1564)

    Holger Fuhrmannek discovered an out-of-bounds read in Web Audio. If a user were tricked in to opening a     specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a     denial of service via application crash or steal confidential information. (CVE-2014-1565)

    A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to     opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to     cause a denial of service via application crash or execute arbitrary code with the privileges of the user     invoking Thunderbird. (CVE-2014-1567)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2329-1 advisory.

    Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman, JW Wang and     David Weir discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit these to cause a denial of service via     application crash, or execute arbitrary code with the privileges of the user invoking Firefox.
    (CVE-2014-1553, CVE-2014-1554, CVE-2014-1562)

    Abhishek Arya discovered a use-after-free during DOM interactions with SVG. If a user were tricked in to     opening a specially crafted page, an attacker could potentially exploit this to cause a denial of service     via application crash or execute arbitrary code with the privileges of the user invoking Firefox.
    (CVE-2014-1563)

    Michal Zalewski discovered that memory is not initialized properly during GIF rendering in some     circumstances. If a user were tricked in to opening a specially crafted page, an attacker could     potentially exploit this to steal confidential information. (CVE-2014-1564)

    Holger Fuhrmannek discovered an out-of-bounds read in Web Audio. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit this to cause a denial of service via     application crash or steal confidential information. (CVE-2014-1565)

    A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via application crash or execute arbitrary code with the privileges of the user invoking Firefox.
    (CVE-2014-1567)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR 31.x installed on the remote Mac OS X host is prior to 31.1. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory safety flaws exist within the browser     engine. Exploiting these, an attacker can cause a denial     of service or execute arbitrary code. (CVE-2014-1553,     CVE-2014-1562)

  - A use-after-free vulnerability exists due to improper     cycle collection when processing animated SVG content.
    A remote attacker can exploit this to cause a denial of     service or execute arbitrary code. (CVE-2014-1563)

  - Memory is not properly initialized during GIF rendering.
    Using a specially crafted web script, a remote attacker     can exploit this to acquire sensitive information from     the process memory. (CVE-2014-1564)

  - The Web Audio API contains a flaw where audio timelines     are properly created. Using specially crafted API calls,     a remote attacker can exploit this to acquire sensitive     information from the process memory or cause a denial of     service. (CVE-2014-1565)

  - A use-after-free vulnerability exists due to improper     handling of text layout in directionality resolution.
    A remote attacker can exploit this to execute arbitrary     code. (CVE-2014-1567)

The version of Firefox ESR 24.x installed on the remote host is prior to 24.8. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory safety flaws exist within the browser     engine. Exploiting these, an attacker can cause a denial     of service or execute arbitrary code. (CVE-2014-1562)

  - A use-after-free vulnerability exists due to improper     handling of text layout in directionality resolution.
    A remote attacker can exploit this to execute arbitrary     code. (CVE-2014-1567)

ID	Name	Product	Family	Published	Updated	Severity
77551	Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20140903)	Nessus	Scientific Linux Local Security Checks	9/5/2014	1/14/2021	critical
77619	openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:1098-1)	Nessus	SuSE Local Security Checks	9/11/2014	1/19/2021	critical
77664	Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2330-1)	Nessus	Ubuntu Local Security Checks	9/12/2014	8/27/2024	high
77486	Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2329-1)	Nessus	Ubuntu Local Security Checks	9/3/2014	8/27/2024	high
77494	Firefox ESR 31.x < 31.1 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	9/3/2014	3/3/2026	critical
77498	Firefox ESR 24.x < 24.8 Multiple Vulnerabilities	Nessus	Windows	9/3/2014	6/23/2026	critical

Detections

Analytics

Plugins Search

critical

critical

high

high

critical

critical