CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NCVE-2014-1496
Medium (5.5). EPSS 0.4% chance of exploitation in the next 30 days.
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mozilla:firefox
- mozilla:seamonkey
- mozilla:thunderbird
- suse:suse_linux_enterprise_desktop
- suse:suse_linux_enterprise_server
- suse:suse_linux_enterprise_software_development_kit
References
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-16.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=925747
- https://security.gentoo.org/glsa/201504-01