csaf_redhat - rhsa-2014

rhsa-2014_0310

Vulnerability from csaf_redhat

Published

2014-03-18 20:34

Modified

2024-11-22 07:40

Summary

Red Hat Security Advisory: firefox security update

Notes

Topic

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1493, CVE-2014-1510, CVE-2014-1511, CVE-2014-1512, CVE-2014-1513, CVE-2014-1514) Several information disclosure flaws were found in the way Firefox processed malformed web content. An attacker could use these flaws to gain access to sensitive information such as cross-domain content or protected memory addresses or, potentially, cause Firefox to crash. (CVE-2014-1497, CVE-2014-1508, CVE-2014-1505) A memory corruption flaw was found in the way Firefox rendered certain PDF files. An attacker able to trick a user into installing a malicious extension could use this flaw to crash Firefox or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1509) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Benoit Jacob, Olli Pettay, Jan Varga, Jan de Mooij, Jesse Ruderman, Dan Gohman, Christoph Diehl, Atte Kettunen, Tyson Smith, Jesse Schwartzentruber, John Thomson, Robert O'Callahan, Mariusz Mlynski, Jüri Aedla, George Hotz, and the security research firm VUPEN as the original reporters of these issues. For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 24.4.0 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. All Firefox users should upgrade to these updated packages, which contain Firefox version 24.4.0 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated firefox packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Firefox is an open source web browser. XULRunner provides the XUL\nRuntime environment for Mozilla Firefox.\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2014-1493, CVE-2014-1510, CVE-2014-1511, CVE-2014-1512,\nCVE-2014-1513, CVE-2014-1514)\n\nSeveral information disclosure flaws were found in the way Firefox\nprocessed malformed web content. An attacker could use these flaws to gain\naccess to sensitive information such as cross-domain content or protected\nmemory addresses or, potentially, cause Firefox to crash. (CVE-2014-1497,\nCVE-2014-1508, CVE-2014-1505)\n\nA memory corruption flaw was found in the way Firefox rendered certain PDF\nfiles. An attacker able to trick a user into installing a malicious\nextension could use this flaw to crash Firefox or, potentially, execute\narbitrary code with the privileges of the user running Firefox.\n(CVE-2014-1509)\n\nRed Hat would like to thank the Mozilla project for reporting these issues.\nUpstream acknowledges Benoit Jacob, Olli Pettay, Jan Varga, Jan de Mooij,\nJesse Ruderman, Dan Gohman, Christoph Diehl, Atte Kettunen, Tyson Smith,\nJesse Schwartzentruber, John Thomson, Robert O\u0027Callahan, Mariusz Mlynski,\nJ\u00fcri Aedla, George Hotz, and the security research firm VUPEN as the\noriginal reporters of these issues.\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Firefox 24.4.0 ESR. You can find a link to the Mozilla\nadvisories in the References section of this erratum.\n\nAll Firefox users should upgrade to these updated packages, which contain\nFirefox version 24.4.0 ESR, which corrects these issues. After installing\nthe update, Firefox must be restarted for the changes to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0310",
        "url": "https://access.redhat.com/errata/RHSA-2014:0310"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html",
        "url": "http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html"
      },
      {
        "category": "external",
        "summary": "1077013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077013"
      },
      {
        "category": "external",
        "summary": "1077016",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077016"
      },
      {
        "category": "external",
        "summary": "1077025",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077025"
      },
      {
        "category": "external",
        "summary": "1077028",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077028"
      },
      {
        "category": "external",
        "summary": "1077029",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077029"
      },
      {
        "category": "external",
        "summary": "1077490",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077490"
      },
      {
        "category": "external",
        "summary": "1077491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077491"
      },
      {
        "category": "external",
        "summary": "1077492",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077492"
      },
      {
        "category": "external",
        "summary": "1077494",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077494"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0310.json"
      }
    ],
    "title": "Red Hat Security Advisory: firefox security update",
    "tracking": {
      "current_release_date": "2024-11-22T07:40:11+00:00",
      "generator": {
        "date": "2024-11-22T07:40:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2014:0310",
      "initial_release_date": "2014-03-18T20:34:18+00:00",
      "revision_history": [
        {
          "date": "2014-03-18T20:34:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-03-18T20:34:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T07:40:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.10.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server-5.10.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el5_10.i386",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el5_10.i386",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el5_10?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.i386",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.i386",
                  "product_id": "firefox-0:24.4.0-1.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.x86_64",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.x86_64",
                  "product_id": "firefox-0:24.4.0-1.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el6_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.x86_64",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.x86_64",
                  "product_id": "firefox-0:24.4.0-1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.src",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.src",
                  "product_id": "firefox-0:24.4.0-1.el5_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.src",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.src",
                  "product_id": "firefox-0:24.4.0-1.el6_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.ppc",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.ppc",
                  "product_id": "firefox-0:24.4.0-1.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el6_5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.ppc",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.ppc",
                  "product_id": "firefox-0:24.4.0-1.el6_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.s390x",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.s390x",
                  "product_id": "firefox-0:24.4.0-1.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el6_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.s390x",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.s390x",
                  "product_id": "firefox-0:24.4.0-1.el6_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el5_10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el5_10?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.s390",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.s390",
                  "product_id": "firefox-0:24.4.0-1.el5_10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el6_5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.s390",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.s390",
                  "product_id": "firefox-0:24.4.0-1.el6_5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el5_10?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el5_10.ia64",
                "product": {
                  "name": "firefox-0:24.4.0-1.el5_10.ia64",
                  "product_id": "firefox-0:24.4.0-1.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el5_10?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el6_5?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.i686",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.i686",
                  "product_id": "firefox-0:24.4.0-1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
                "product": {
                  "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
                  "product_id": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.4.0-1.el6_5?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.4.0-1.el6_5.ppc64",
                "product": {
                  "name": "firefox-0:24.4.0-1.el6_5.ppc64",
                  "product_id": "firefox-0:24.4.0-1.el6_5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.4.0-1.el6_5?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.i386",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.s390",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.src",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.i386",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.s390",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.s390",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.src",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-0:24.4.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.s390",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.src",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.src",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.src",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2014-1493",
      "discovery_date": "2014-03-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077013"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:24.4) (MFSA 2014-15)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1493"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077013",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077013"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1493",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1493"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1493",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1493"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-15.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-15.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:24.4) (MFSA 2014-15)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Atte Kettunen"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1497",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2014-03-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077016"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out of bounds read during WAV file decoding (MFSA 2014-17)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1497"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077016",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077016"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1497",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1497"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1497",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1497"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-17.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-17.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Out of bounds read during WAV file decoding (MFSA 2014-17)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Robert O\u0027Callahan"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1505",
      "discovery_date": "2014-03-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077029"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: SVG filters information disclosure through feDisplacementMap (MFSA 2014-28)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1505"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077029",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077029"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1505",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1505"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1505",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1505"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-28.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-28.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: SVG filters information disclosure through feDisplacementMap (MFSA 2014-28)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Tyson Smith",
            "Jesse Schwartzentruber"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1508",
      "discovery_date": "2014-03-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077025"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Information disclosure through polygon rendering in MathML (MFSA 2014-26)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1508"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077025",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077025"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1508",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1508"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1508",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1508"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-26.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-26.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Information disclosure through polygon rendering in MathML (MFSA 2014-26)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "John Thomson"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1509",
      "discovery_date": "2014-03-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077028"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1509"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077028",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077028"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1509",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1509"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1509",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1509"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-27.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-27.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1510",
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077490"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1510"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077490",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077490"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1510",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1510"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1510",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1510"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1511",
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077490"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077490",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077490"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1511"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Security research firm VUPEN"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1512",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in TypeObject (MFSA 2014-30)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1512"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-30.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-30.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free in TypeObject (MFSA 2014-30)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "J\u00fcri Aedla"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1513",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077492"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds read/write through neutering ArrayBuffer objects (MFSA 2014-31)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077492",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077492"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1513"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-31.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-31.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Out-of-bounds read/write through neutering ArrayBuffer objects (MFSA 2014-31)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "George Hotz"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1514",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077494"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds write through TypedArrayObject after neutering (MFSA 2014-32)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077494",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077494"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1514"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-32.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-32.html"
        }
      ],
      "release_date": "2014-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-03-18T20:34:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0310"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.4.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.4.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.4.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.4.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Out-of-bounds write through TypedArrayObject after neutering (MFSA 2014-32)"
    }
  ]
}

cve-2014-1511

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/66207	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=982909	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2014/mfsa2014-29.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.250Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "66207",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66207"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982909"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "66207",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66207"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982909"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1511",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "66207",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66207"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=982909",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982909"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1511",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1497

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/66423	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2014/mfsa2014-17.html	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=966311	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.202Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "66423",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66423"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-17.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=966311"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "66423",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66423"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-17.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=966311"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1497",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "66423",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66423"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-17.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-17.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=966311",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=966311"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1497",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.202Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1508

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2014/mfsa2014-26.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=963198	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/66426	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.374Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-26.html"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=963198"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "name": "66426",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66426"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-26.html"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=963198"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "name": "66426",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66426"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1508",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-26.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-26.html"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=963198",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=963198"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "66426",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66426"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1508",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1509

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/66425	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2014/mfsa2014-27.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=966021	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.199Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "66425",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66425"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-27.html"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=966021"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-20T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "66425",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66425"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-27.html"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=966021"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1509",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "66425",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66425"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-27.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-27.html"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=966021",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=966021"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1509",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.199Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1512

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2014/mfsa2014-30.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=982957	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://archives.neohapsis.com/archives/bugtraq/2014-03/0145.html	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/bid/66209	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-30.html"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982957"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          },
          {
            "name": "20140326 VUPEN Security Research - Mozilla Firefox \"BumpChunk\" Object Processing Use-after-free (Pwn2Own)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2014-03/0145.html"
          },
          {
            "name": "66209",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66209"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-30.html"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982957"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        },
        {
          "name": "20140326 VUPEN Security Research - Mozilla Firefox \"BumpChunk\" Object Processing Use-after-free (Pwn2Own)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2014-03/0145.html"
        },
        {
          "name": "66209",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66209"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1512",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-30.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-30.html"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=982957",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982957"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            },
            {
              "name": "20140326 VUPEN Security Research - Mozilla Firefox \"BumpChunk\" Object Processing Use-after-free (Pwn2Own)",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2014-03/0145.html"
            },
            {
              "name": "66209",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66209"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1512",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1505

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=941887	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2014/mfsa2014-28.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/66418	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=941887"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-28.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          },
          {
            "name": "66418",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66418"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=941887"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-28.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        },
        {
          "name": "66418",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66418"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1505",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=941887",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=941887"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-28.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-28.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            },
            {
              "name": "66418",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66418"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1505",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1513

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2014/mfsa2014-31.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/66203	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=982974	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.222Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-31.html"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "66203",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66203"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982974"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-31.html"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "66203",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66203"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982974"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1513",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-31.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-31.html"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "66203",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66203"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=982974",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982974"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1513",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.222Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1493

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=896268	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/66412	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=967341	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2014/mfsa2014-15.html	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=960145	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=965982	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=977538	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=963974	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=958867	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.268Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=896268"
          },
          {
            "name": "66412",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=967341"
          },
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-15.html"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=960145"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=965982"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=977538"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=963974"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=958867"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=896268"
        },
        {
          "name": "66412",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=967341"
        },
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-15.html"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=960145"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=965982"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=977538"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=963974"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=958867"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1493",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=896268",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=896268"
            },
            {
              "name": "66412",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66412"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=967341",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=967341"
            },
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-15.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-15.html"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=960145",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=960145"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=965982",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=965982"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=977538",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=977538"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=963974",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=963974"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=958867",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=958867"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1493",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.268Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1510

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/66206	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=982906	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2014/mfsa2014-29.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.189Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "name": "66206",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66206"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982906"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "name": "66206",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66206"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982906"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1510",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "66206",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66206"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=982906",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=982906"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-29.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1510",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.189Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-1514

Vulnerability from cvelistv5

Published

2014-03-19 10:00

Modified

2024-08-06 09:42

Severity ?

Summary

vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2014-0310.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-2911	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201504-01	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2151-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2014/mfsa2014-32.html	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2881	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=983344	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/66240	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0316.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:42:36.390Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2014:0310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
          },
          {
            "name": "DSA-2911",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2911"
          },
          {
            "name": "GLSA-201504-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201504-01"
          },
          {
            "name": "SUSE-SU-2014:0418",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "USN-2151-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2151-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-32.html"
          },
          {
            "name": "DSA-2881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=983344"
          },
          {
            "name": "66240",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66240"
          },
          {
            "name": "openSUSE-SU-2014:0419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
          },
          {
            "name": "RHSA-2014:0316",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
          },
          {
            "name": "openSUSE-SU-2014:0584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2014:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2014:0310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
        },
        {
          "name": "DSA-2911",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2911"
        },
        {
          "name": "GLSA-201504-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201504-01"
        },
        {
          "name": "SUSE-SU-2014:0418",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "USN-2151-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2151-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-32.html"
        },
        {
          "name": "DSA-2881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=983344"
        },
        {
          "name": "66240",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66240"
        },
        {
          "name": "openSUSE-SU-2014:0419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
        },
        {
          "name": "RHSA-2014:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
        },
        {
          "name": "openSUSE-SU-2014:0584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2014:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2014-1514",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2014:0310",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0310.html"
            },
            {
              "name": "DSA-2911",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2911"
            },
            {
              "name": "GLSA-201504-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201504-01"
            },
            {
              "name": "SUSE-SU-2014:0418",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "USN-2151-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2151-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2014/mfsa2014-32.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-32.html"
            },
            {
              "name": "DSA-2881",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2881"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=983344",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=983344"
            },
            {
              "name": "66240",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66240"
            },
            {
              "name": "openSUSE-SU-2014:0419",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html"
            },
            {
              "name": "RHSA-2014:0316",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0316.html"
            },
            {
              "name": "openSUSE-SU-2014:0584",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2014:0448",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2014-1514",
    "datePublished": "2014-03-19T10:00:00",
    "dateReserved": "2014-01-16T00:00:00",
    "dateUpdated": "2024-08-06T09:42:36.390Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature