CVE-2014-1590
Fixed in a distro release EPSS 2%
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | icedove | 31.3.0-1~deb7u1 |
| Debian 7 | iceweasel | 31.3.0esr-1~deb7u1 |
| Red Hat Enterprise Linux 5 | firefox | 0:31.3.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:31.3.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:31.3.0-1.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:31.3.0-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:31.3.0-3.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:31.3.0-3.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:31.3.0-1.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:31.3.0-1.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:31.3.0-3.el7_0 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:31.3.0-3.el7_0 |
| Ubuntu 14.04 LTS | firefox | 34.0+build2-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | thunderbird | 1:31.3.0+build1-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |