Your submission was sent successfully! Close

CVE-2014-1488

Published: 5 February 2014

The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.

Priority

Medium

Status

Package Release Status
firefox
Launchpad, Ubuntu, Debian
lucid Ignored
(reached end-of-life)
precise
Released (27.0+build1-0ubuntu0.12.04.1)
quantal
Released (27.0+build1-0ubuntu0.12.10.1)
saucy
Released (27.0+build1-0ubuntu0.13.10.1)
upstream
Released (27.0)