--- title: "CVE-2014-1564\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-1564?format=md keywords: index, follow --- # CVE-2014-1564 Publication date 2 September 2014 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 14.04 LTS trusty | Fixed 32.0+build1-0ubuntu0.14.04.1 | | 12.04 LTS precise | Fixed 32.0+build1-0ubuntu0.12.04.1 | | 10.04 LTS lucid | Ignored end of life | | thunderbird | 14.04 LTS trusty | Fixed 1:31.1.1+build1-0ubuntu0.14.04.1 | | 12.04 LTS precise | Fixed 1:31.1.0+build2-0ubuntu0.12.04.1 | | 10.04 LTS lucid | Ignored end of life | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1564) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-1564) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-1564) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-1564) ### Related Ubuntu Security Notices (USN) + [USN-2329-1](https://usn.ubuntu.com/USN-2329-1) + Firefox vulnerabilities + 2 September 2014 + [USN-2330-1](https://usn.ubuntu.com/USN-2330-1) + Thunderbird vulnerabilities + 11 September 2014 ### Other references * *