Vulnerability · NVD
CVE-2014-1551
Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object.
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
NVD references 4 distinct products for this CVE — only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗
Vulnerable CPE configurations (9)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | ≤24.6 | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.0:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.0.1:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.1:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.1.1:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.2:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.3:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.4:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:24.5:*:*:*:*:*:*:* |