Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner | Dec 1, 2016 | Sep 3, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/nspr.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Sep 3, 2014 |
| Mfsa2014 72 | — | Upgrade to Mozilla Firefox version 32.0Upgrade to Mozilla Firefox ESR version 24.8Upgrade to Mozilla Firefox ESR version 31.1Upgrade to the latest version of Mozilla Firefox | Sep 4, 2014 | Sep 2, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.29.0 | Dec 11, 2014 | Sep 3, 2014 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.8Upgrade to Mozilla Thunderbird version 31.1Upgrade to the latest version of Mozilla Thunderbird | Sep 4, 2014 | Sep 2, 2014 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 3, 2014 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Sep 3, 2014 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade libsoftokn3Upgrade libfreebl3Upgrade libsoftokn3-x86Upgrade MozillaFirefoxUpgrade libfreebl3-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade libfreebl3-32bitUpgrade mozilla-nss-develUpgrade mozilla-nspr-x86Upgrade mozilla-nss-x86Upgrade MozillaThunderbird-develUpgrade MozillaFirefox-translations | Dec 18, 2015 | Sep 3, 2014 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Sep 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub