Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2014-1595

EPSS 0.08% · P25
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-1595

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款Mozilla产品信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mozilla Firefox、Firefox ESR和Thunderbird都是由美国Mozilla基金会开发的产品。Firefox是一款开源Web浏览器,Firefox ESR是Firefox的一个延长支持版本。Thunderbird是从Mozilla Application Suite中独立出来的一套电子邮件客户端软件。 多款Mozilla产品中存在安全漏洞,该漏洞源于程序忽略了jemalloc-based应用程序必需的CoreGraphics disable-logging操作。本地攻击者可通过读
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-1595

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-1595

Please Login to view more intelligence information

Same Patch Batch · n/a · 2014-12-11 · 49 CVEs total

CVE-2014-6357Microsoft 释放后使用Word远程执行代码漏洞
CVE-2014-6363Microsoft VBScript 内存损坏漏洞
CVE-2014-6365Microsoft Internet Explorer XSS 筛选器绕过漏洞
CVE-2014-6373Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6374Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6375Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6376Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-8966Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6369Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6360Microsoft Excel中全局空闲远程执行代码漏洞
CVE-2014-6361Microsoft Excel 无效指针远程执行代码漏洞
CVE-2014-6356Microsoft 无效索引远程执行代码漏洞
CVE-2014-6355Microsoft Windows Server Graphics组件信息泄露漏洞
CVE-2014-6336Microsoft Exchange URL重定向漏洞
CVE-2014-6330Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6329Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6328Microsoft Internet Explorer XSS 筛选器绕过漏洞
CVE-2014-6327Microsoft Internet Explorer 内存损坏漏洞
CVE-2014-6326Microsoft OWA XSS 漏洞
CVE-2014-6325Microsoft OWA XSS 漏洞

Showing top 20 of 49 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2014-1595

No comments yet


Leave a comment