Mozilla Project 報告：

MFSA 2014-15 其他記憶體安全性危險 (rv:28.0 / rv:24.4)

MFSA 2014-16 在更新期間擷取的檔案不總是唯讀

MFSA 2014-17 WAV 檔案解碼期間有超出邊界讀取問題

MFSA 2014-18 crypto.generateCRMFRequest 沒有驗證金鑰類型

MFSA 2014-19 WebRTC 權限提示時發生偽造攻擊

MFSA 2014-20 onbeforeunload 和 JavaScript 導覽 DOS

MFSA 2014-21 透過在新索引標籤中開啟連結，進行本機檔案存取

MFSA 2014-22 WebGL 內容從一個網域插入另一個網域的轉譯

MFSA 2014-23 工作階段還原未保留 data: 文件的內容安全性原則

MFSA 2014-24 Android Crash Reporter 可供操控

MFSA 2014-25 容易受到相對路徑逸出影響的 Firefox OS DeviceStorageFile 物件

MFSA 2014-26 透過 MathML 多邊體轉譯而造成資訊洩漏

MFSA 2014-27 在 PDF 字型轉譯期間在 Cairo 中發生記憶體損毀

MFSA 2014-28 SVG 透過 feDisplacementMap 篩選資訊洩漏

MFSA 2014-29 使用 WebIDL 實作的 API 時發生權限提升

MFSA 2014-30 TypeObject 中的釋放後使用問題

MFSA 2014-31 透過刪除 ArrayBuffer 物件造成超出邊界讀/寫錯誤

MFSA 2014-32 刪除後，透過 TypedArrayObject 造成超出邊界寫入錯誤

Mozilla Thunderbird 已更新至 24.4.0 版。Mozilla SeaMonkey 已更新至 2.25 版。

- MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 其他記憶體安全危險

- MFSA 2014-17/CVE-2014-1497 (bmo#966311) WAV 檔案解碼期間有超出邊界讀取問題

- MFSA 2014-18/CVE-2014-1498 (bmo#935618) crypto.generateCRMFRequest 沒有驗證金鑰類型

- MFSA 2014-19/CVE-2014-1499 (bmo#961512) WebRTC 權限提示時發生偽造攻擊

- MFSA 2014-20/CVE-2014-1500 (bmo#956524) onbeforeunload 和 JavaScript 導覽 DOS

- MFSA 2014-22/CVE-2014-1502 (bmo#972622) WebGL 內容從一個網域插入另一個網域的轉譯

- MFSA 2014-23/CVE-2014-1504 (bmo#911547) 工作階段還原未保留 data: 文件的內容安全性原則

- MFSA 2014-26/CVE-2014-1508 (bmo#963198) 透過 MathML 多邊體轉譯而造成資訊洩漏

- MFSA 2014-27/CVE-2014-1509 (bmo#966021) 在 PDF 字型轉譯期間在 Cairo 中發生記憶體損毀

- MFSA 2014-28/CVE-2014-1505 (bmo#941887) SVG 透過 feDisplacementMap 篩選資訊洩漏

- MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906、bmo#982909) 使用 WebIDL 實作的 API 時發生權限提升

- MFSA 2014-30/CVE-2014-1512 (bmo#982957) TypeObject 中有釋放後使用問題

- MFSA 2014-31/CVE-2014-1513 (bmo#982974) 透過刪除 ArrayBuffer 物件造成超出邊界讀/寫錯誤

- MFSA 2014-32/CVE-2014-1514 (bmo#983344) 刪除後，透過 TypedArrayObject 造成超出邊界寫入錯誤

Mozilla Firefox ESR version 24.4 is now patched against multiple vulnerabilities, the most critical of which include:

 - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access through TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)
 - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)
 - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)
 - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)
 - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)

 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

Additionally, numerous other vulnerabilities have been patched. See reference links for details.

SeaMonkey 2.25 is now patched against multiple vulnerabilities, the most critical of which include:

  - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access throuhg TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)

  - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)

  - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)

  - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)

  - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)

 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

Additionally, numerous other vulnerabilities have been patched. See reference links for details.

Versions of Mozilla Firefox prior to 28.0 have been patched against multiple vulnerabilities, the most critical of which include:

 - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access through TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)
 - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)
 - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)
 - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)
 - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)

 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

Additionally, numerous other vulnerabilities have been patched. See reference links for details.

Versions of Mozilla Thunderbird prior to 24.4 are prone to the following vulnerabilities :

 - Out-of-bounds read/write access through ArrayBuffer objects, as well as out-of-bounds write access through TypedArrayObject, which enable remote code execution (CVE-2014-1513, CVE-2014-1514)
 - Use-after-free error in TypeObject due to possible memory corruption during Garbage Collection in the JS engine, which can be exploited for arbitrary code execution (CVE-2014-1512)
 - Privilege escalation using Web-IDL to call JS function 'window.open()', as well as a bug allowing bypass of the popup-blocker without user interaction, could allow an attacker to run arbitrary code with full privileges of the browser (CVE-2014-1510, CVE-2014-1511)
 - Out-of-bounds read during polygon rendering in MathML can be leveraged for information disclosure of protected memory address, especially when combined with timing attacks via SVG filters and displacement input to 'feDisplacementMap' (CVE-2014-1505, CVE-2014-1508)
 - Out-of-bounds read access during WAV file decoding could allow web countent to access heap data or cause a crash (CVE-2014-1497)
 - Miscellaneous memory safety hazards (CVE-2014-1493, CVE-2014-1494)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
73111	FreeBSD：mozilla -- 多個弱點 (610de647-af8d-11e3-a25b-b4b52fce4ce8)	Nessus	FreeBSD Local Security Checks	2014/3/20	2021/1/6	critical
75333	openSUSE 安全性更新：MozillaThunderbird / seamonkey (openSUSE-SU-2014:0584-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
701243	Mozilla Firefox ESR < 24.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2019/11/6	2019/11/6	high
8172	SeaMonkey < 2.25 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/3/26	2019/3/6	high
8171	Mozilla Firefox < 28.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/3/26	2019/11/6	high
8173	Mozilla Thunderbird < 24.4 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2014/3/26	2019/3/6	high

検出

プラグインの検索

critical

high

high

high

high

high