CVE-2014-1541
mozilla: no CVSS score yet. EPSS 3.7% chance of exploitation in the next 30 days.
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mozilla:firefox
- mozilla:firefox_esr
- mozilla:thunderbird
References
- http://linux.oracle.com/errata/ELSA-2014-0741.html
- http://linux.oracle.com/errata/ELSA-2014-0742.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html