medium5.5
CVE-2014-1496
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by mod…
Impact
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 28.0 from 24.0 before 24.4 |
| Mozilla | Seamonkey | before 2.25 |
| Mozilla | Thunderbird | before 24.4 |
| Suse | Suse Linux Enterprise Software Development Kit | Version 11.0 |
| Suse | Suse Linux Enterprise Desktop | Version 11 |
| Suse | Suse Linux Enterprise Server | Version 11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-16.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=925747
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-16.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=925747
- https://security.gentoo.org/glsa/201504-01