CVE-2014-1496

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.htmlMailing List, Third Party Advisory
http://www.mozilla.org/security/announce/2014/mfsa2014-16.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=925747Exploit, Issue Tracking, Vendor Advisory
https://security.gentoo.org/glsa/201504-01Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.htmlMailing List, Third Party Advisory
http://www.mozilla.org/security/announce/2014/mfsa2014-16.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=925747Exploit, Issue Tracking, Vendor Advisory
https://security.gentoo.org/glsa/201504-01Third Party Advisory

Timeline

Published: Mar 19, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014