CyberSec.Space Logo
Back to CVE Browser

CVE-2014-1551

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0460%
EPSS Percentile20.45th
PublishedJul 23, 2014
Last ModifiedMay 6, 2026

Vulnerability Description

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object.

Affected Platforms (CPE)

📦
Mozilla

Firefox

<= 30.0
📦
Mozilla

Firefox

= 24.0
📦
Mozilla

Firefox

= 24.0.1
📦
Mozilla

Firefox

= 24.0.2
📦
Mozilla

Firefox

= 24.1.0
📦
Mozilla

Firefox

= 24.1.1
📦
Mozilla

Firefox Esr

= 24.2
📦
Mozilla

Firefox Esr

= 24.3
📦
Mozilla

Firefox Esr

= 24.4
📦
Mozilla

Firefox Esr

= 24.5
📦
Mozilla

Firefox Esr

= 24.6
📦
Mozilla

Thunderbird

<= 24.6
📦
Mozilla

Thunderbird

= 24.0
📦
Mozilla

Thunderbird

= 24.0.1
📦
Mozilla

Thunderbird

= 24.1
📦
Mozilla

Thunderbird

= 24.1.1
📦
Mozilla

Thunderbird

= 24.2
📦
Mozilla

Thunderbird

= 24.3
📦
Mozilla

Thunderbird

= 24.4
📦
Mozilla

Thunderbird

= 24.5

References & Advisories

🔗 http://secunia.com/advisories/59760
🔗 http://www.mozilla.org/security/announce/2014/mfsa2014-59.html
🔗 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
🔗 http://www.securitytracker.com/id/1030619
🔗 http://www.securitytracker.com/id/1030620
🔗 https://bugzilla.mozilla.org/show_bug.cgi?id=1018234
🔗 https://security.gentoo.org/glsa/201504-01
🔗 http://secunia.com/advisories/59760

Related Vulnerabilities

CVE-2019-1170810.0

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the no...

CVE-2019-2513610.0

A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and ...

CVE-2018-1850510.0

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication betwee...

CVE-2020-1238810.0

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this iss...