CVE编号
CVE-2014-1477利用情况
暂无补丁情况
官方补丁披露时间
2014-02-06漏洞描述
Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla所发布的WEB浏览器/新闻组客户端/邮件客户端。Mozilla Firefox/SeaMonkey/Thunderbird存在内存破坏漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析，可使应用程序崩溃或执行任意代码。
解决建议
Mozilla Firefox 27，Firefox ESR 24.3，Thunderbird 24.3或SeaMonkey 2.24已经修复该漏洞，建议用户下载更新：http://www.mozilla.org/
参考链接 |
|
|---|---|
| http://download.novell.com/Download?buildid=VYQsgaFpQ2k | |
| http://download.novell.com/Download?buildid=Y2fux-JW1Qc | |
| http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html | |
| http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html | |
| http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html | |
| http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html | |
| http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html | |
| http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html | |
| http://osvdb.org/102864 | |
| http://rhn.redhat.com/errata/RHSA-2014-0132.html | |
| http://rhn.redhat.com/errata/RHSA-2014-0133.html | |
| http://secunia.com/advisories/56706 | |
| http://secunia.com/advisories/56761 | |
| http://secunia.com/advisories/56763 | |
| http://secunia.com/advisories/56767 | |
| http://secunia.com/advisories/56787 | |
| http://secunia.com/advisories/56858 | |
| http://secunia.com/advisories/56888 | |
| http://www.debian.org/security/2014/dsa-2858 | |
| http://www.mozilla.org/security/announce/2014/mfsa2014-01.html | |
| http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html | |
| http://www.securityfocus.com/bid/65317 | |
| http://www.securitytracker.com/id/1029717 | |
| http://www.securitytracker.com/id/1029720 | |
| http://www.securitytracker.com/id/1029721 | |
| http://www.ubuntu.com/usn/USN-2102-1 | |
| http://www.ubuntu.com/usn/USN-2102-2 | |
| http://www.ubuntu.com/usn/USN-2119-1 | |
| https://8pecxstudios.com/?page_id=44080 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=921470 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=925896 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=936808 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=937132 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=937697 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=945334 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=945939 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=950000 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=950438 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=951366 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=953114 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/90899 | |
| https://security.gentoo.org/glsa/201504-01 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | mozilla | firefox | * |
Up to (excluding) 27.0 |
|||||
| 运行在以下环境 | |||||||||
| 应用 | mozilla | firefox_esr | * |
From (including) 24.0 |
Up to (excluding) 24.3 |
||||
| 运行在以下环境 | |||||||||
| 应用 | mozilla | seamonkey | * |
Up to (excluding) 2.24 |
|||||
| 运行在以下环境 | |||||||||
| 应用 | mozilla | thunderbird | * |
Up to (excluding) 24.3 |
|||||
| 运行在以下环境 | |||||||||
| 应用 | suse | suse_linux_enterprise_software_development_kit | 11.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian | DPKG | * |
Up to (excluding) 24.3.0esr-1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | redhat_6 | firefox | * |
Up to (excluding) 0:24.3.0-2.el5_10 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | redhat_6 | thunderbird | * |
Up to (excluding) 0:24.3.0-2.el5_10 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | suse_12 | MozillaFirefox | * |
Up to (excluding) 31.1.0esr-1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_12.04_lts | firefox | * |
Up to (excluding) 27.0+build1-0ubuntu0.12.04.1 |
|||||
- 攻击路径 远程
- 攻击复杂度 复杂
- 权限要求 无需权限
- 影响范围 有限影响
- EXP成熟度 未验证
- 补丁情况 官方补丁
- 数据保密性 无影响
- 数据完整性 无影响
- 服务器危害 无影响
- 全网数量 100
还没有评论，来说两句吧...