VULNERABILITY INTELLIGENCE
CVE-2014-1564
CVSS score4.3 MEDIUM
EPSS probability5.46%
CISA KEVNot currently listed
Published2014-09-03
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
Weakness classification
- CWE-824: Access of Uninitialized Pointer
Primary references
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org
- security@mozilla.org — Third Party Advisory
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org — Vendor Advisory
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org