CVE-2014-1564
- State
- Published
- Severity
- Not scored
- Published
- Sep 3, 2014
- Updated
- Aug 6, 2024
- Reserved
- Jan 16, 2014
Description
Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- openSUSE-SU-2015:0138vendor-advisory
- 20140904 Uninit memory disclosure via truncated images in Firefoxmailing-list
- http://packetstormsecurity.com/files/128132/Mozilla-Firefox-Secret-Leak.html
- 20140903 Uninit memory disclosure via truncated images in Firefoxmailing-list
- GLSA-201504-01vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- 1030794vdb-entry
- 69525vdb-entry
- openSUSE-SU-2015:1266vendor-advisory
- http://www.mozilla.org/security/announce/2014/mfsa2014-69.html
- openSUSE-SU-2014:1098vendor-advisory
- 60148third-party-advisory
- openSUSE-SU-2014:1099vendor-advisory
- 61114third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1045977
- 1030793vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.