https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:05:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00053 bdu:2015-00053 https://cve.radiocsirt.org/vuln/bdu:2015-00053 https://cve.radiocsirt.org/vuln/certfr-2014-avi-209 certfr-2014-avi-209 https://cve.radiocsirt.org/vuln/certfr-2014-avi-209 https://cve.radiocsirt.org/vuln/euvd-2026-97689 EUVD-2026-97689 https://cve.radiocsirt.org/vuln/euvd-2026-97689 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1524 <p>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</p> <p>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-1524 https://cve.radiocsirt.org/vuln/ghsa-c496-q9f8-gv47 <p>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</p> <p>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</p> https://cve.radiocsirt.org/vuln/ghsa-c496-q9f8-gv47 https://cve.radiocsirt.org/vuln/gsd-2014-1524 gsd-2014-1524 https://cve.radiocsirt.org/vuln/gsd-2014-1524 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2014:0448 <p>Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34) Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37) Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38) Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42) Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43) Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44) Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)</p> <p>Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34) Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37) Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38) Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42) Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43) Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44) Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0448 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1524 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird</p> <p>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird</p> <p>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1524