CVE-2014-1555 PUBLISHED

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

EPSS 3.36% · 87.3th percentile

Risk Scores

EPSS Score
3.36%
87.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSthunderbird1:24.6.0+build1-0ubuntu0.14.04.1, 0, 1:24.0+build1-0ubuntu1
Ubuntu:14.04:LTSfirefox0, 24.0+build1-0ubuntu1, 25.0+build3-0ubuntu0.13.10.1

Timeline

References

Open in Interactive Console →