The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefox-esrUpgrade seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Apr 29, 2014 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Apr 30, 2014 |
| Mfsa2014 39 | — | Upgrade to Mozilla Firefox version 29.0Upgrade to the latest version of Mozilla Firefox | Apr 30, 2014 | Apr 29, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.26Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Apr 30, 2014 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 30, 2014 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-other | Dec 18, 2015 | Apr 30, 2014 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Apr 30, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub