VULNERABILITY INTELLIGENCE
CVE-2014-1563
CVSS score10 HIGH
EPSS probability5.80%
CISA KEVNot currently listed
Published2014-09-03
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
Weakness classification
- CWE-416: Use After Free
Primary references
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org
- security@mozilla.org — Third Party Advisory
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org — Issue Tracking