Errata ID | 76 |
---|---|
Date | 2014-03-20 |
Source package | firefox-de |
Fixed in version | 24.4.0esr-6.41.201403191156 |
Description | This update consists of two updates for firefox-en and firefox-de. Several vulnerabilities have been fixed with the update to Firefox ESR 24.4: * Memory corruption in the browser engine (CVE-2014-1493) * Out of bounds read in processing WAV files (CVE-2014-1497) * Information disclosure in SVG filters (CVE-2014-1505) * Out of bounds read in MathML parsing (CVE-2014-1508) * Memory corruption in PDF processing (CVE-2014-1509) * Privilege escalation in WebIDL (CVE-2014-1510, CVE-2014-1511) * Use-after-free in the garbage collector (CVE-2014-1512) * Out of bounds write in Javascript array handling (CVE-2014-1513, CVE-2014-1514) |
Additional notes | This update fixes these vulnerabilities. |
CVE ID | CVE-2014-1493 CVE-2014-1497 CVE-2014-1505 CVE-2014-1508 CVE-2014-1509 CVE-2014-1510 CVE-2014-1511 CVE-2014-1512 CVE-2014-1513 CVE-2014-1514 |