Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner | Dec 1, 2016 | Sep 3, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/nspr.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Sep 3, 2014 |
| Mfsa2014 72 | — | Upgrade to Mozilla Firefox version 32.0Upgrade to Mozilla Firefox ESR version 31.1Upgrade to Mozilla Firefox ESR version 24.8Upgrade to the latest version of Mozilla Firefox | Sep 4, 2014 | Sep 2, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.29.0 | Dec 11, 2014 | Sep 3, 2014 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 31.1Upgrade to Mozilla Thunderbird version 24.8 | Sep 4, 2014 | Sep 2, 2014 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 3, 2014 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner | Oct 16, 2024 | Sep 3, 2014 |
| Suse | — | Upgrade mozilla-nss-32bitUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade libsoftokn3-x86Upgrade mozilla-nspr-x86Upgrade MozillaFirefox-translationsUpgrade MozillaThunderbird-develUpgrade mozilla-nss-x86Upgrade libsoftokn3Upgrade libfreebl3-x86Upgrade libfreebl3-32bitUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nssUpgrade MozillaFirefox-devel | Dec 18, 2015 | Sep 3, 2014 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Sep 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub