Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.4%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2014-1563


Contact Us

Shodan ® - All rights reserved