Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Project Subscriptions

Vendors Products
Canonical Subscribe
Ubuntu Linux Subscribe
Debian Linux Subscribe
Fedoraproject Subscribe
Mozilla Subscribe
Firefox Subscribe
Seamonkey Subscribe
Thunderbird Subscribe
Opensuse Subscribe
Opensuse Subscribe
Enterprise Linux Subscribe
Enterprise Linux Desktop Subscribe
Enterprise Linux Eus Subscribe
Enterprise Linux Server Subscribe
Enterprise Linux Server Aus Subscribe
Enterprise Linux Server Eus Subscribe
Enterprise Linux Server Tus Subscribe
Enterprise Linux Workstation Subscribe
Suse Linux Enterprise Desktop Subscribe
Suse Linux Enterprise Server Subscribe
Suse Linux Enterprise Software Development Kit Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-2858-1 iceweasel security update
EUVD EUVD EUVD-2014-1553 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Ubuntu USN Ubuntu USN USN-2102-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2119-1 Thunderbird vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
http://download.novell.com/Download?buildid=VYQsgaFpQ2k cve-icon cve-icon
http://download.novell.com/Download?buildid=Y2fux-JW1Qc cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html cve-icon cve-icon
http://osvdb.org/102864 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0132.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2014-0133.html cve-icon cve-icon
http://secunia.com/advisories/56706 cve-icon cve-icon
http://secunia.com/advisories/56761 cve-icon cve-icon
http://secunia.com/advisories/56763 cve-icon cve-icon
http://secunia.com/advisories/56767 cve-icon cve-icon
http://secunia.com/advisories/56787 cve-icon cve-icon
http://secunia.com/advisories/56858 cve-icon cve-icon
http://secunia.com/advisories/56888 cve-icon cve-icon
http://www.debian.org/security/2014/dsa-2858 cve-icon cve-icon
http://www.mozilla.org/security/announce/2014/mfsa2014-01.html cve-icon cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html cve-icon cve-icon
http://www.securityfocus.com/bid/65317 cve-icon cve-icon
http://www.securitytracker.com/id/1029717 cve-icon cve-icon
http://www.securitytracker.com/id/1029720 cve-icon cve-icon
http://www.securitytracker.com/id/1029721 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2102-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2102-2 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2119-1 cve-icon cve-icon
https://8pecxstudios.com/?page_id=44080 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=921470 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=925896 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=936808 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=937132 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=937697 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=945334 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=945939 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=950000 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=950438 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=951366 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=953114 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/90899 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2014-1477 cve-icon
https://security.gentoo.org/glsa/201504-01 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2014-1477 cve-icon
History

Tue, 25 Nov 2025 18:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2024-08-06T09:42:35.412Z

Reserved: 2014-01-16T00:00:00

Link: CVE-2014-1477

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-02-06T05:44:24.393

Modified: 2025-11-25T17:50:16.803

Link: CVE-2014-1477

cve-icon Redhat

Severity : Critical

Publid Date: 2014-02-04T00:00:00Z

Links: CVE-2014-1477 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses