Errata overview
Errata ID 76
Date 2014-03-20
Source package firefox-de
Fixed in version 24.4.0esr-6.41.201403191156
Description
This update consists of two updates for firefox-en and firefox-de.
Several vulnerabilities have been fixed with the update to Firefox ESR 24.4:
* Memory corruption in the browser engine (CVE-2014-1493)
* Out of bounds read in processing WAV files (CVE-2014-1497)
* Information disclosure in SVG filters (CVE-2014-1505)
* Out of bounds read in MathML parsing (CVE-2014-1508)
* Memory corruption in PDF processing (CVE-2014-1509)
* Privilege escalation in WebIDL (CVE-2014-1510, CVE-2014-1511)
* Use-after-free in the garbage collector (CVE-2014-1512)
* Out of bounds write in Javascript array handling (CVE-2014-1513, CVE-2014-1514)
Additional notes This update fixes these vulnerabilities.
CVE ID CVE-2014-1493
CVE-2014-1497
CVE-2014-1505
CVE-2014-1508
CVE-2014-1509
CVE-2014-1510
CVE-2014-1511
CVE-2014-1512
CVE-2014-1513
CVE-2014-1514