CVE-2014-1525

Publication date 29 April 2014

Last updated 24 July 2024


Ubuntu priority

The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.

Status

Package Ubuntu Release Status
firefox 14.04 LTS trusty
Fixed 29.0+build1-0ubuntu0.14.04.2
13.10 saucy
Fixed 29.0+build1-0ubuntu0.13.10.3
12.10 quantal
Fixed 29.0+build1-0ubuntu0.12.10.3
12.04 LTS precise
Fixed 29.0+build1-0ubuntu0.12.04.2
10.04 LTS lucid Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-2185-1
    • Firefox vulnerabilities
    • 29 April 2014

Other references