CVE-2014-1531

Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.

Affected products

Alt Linux, Centos, Firefox, Red Hat, Seamonkey, Suse, Thunderbird, Ubuntu

Mozilla Firefox

< 29.0, 24.5

Mozilla Seamonkey

< 2.26

Mozilla Thunderbird

< 24.5

Fix

Available

CVSS 2.0

9.3 HIGH

CVSS 3.1

8.8 HIGH

EPSS

5.6% (92th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2014-04-30

No exploit for CVE-2014-1531 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.