CVE-2014-1551 (retired)

Priority
Description
Use-after-free vulnerability in the FontTableRec destructor in Mozilla
Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before
24.7 on Windows allows remote attackers to execute arbitrary code via
crafted use of fonts in MathML content, leading to improper handling of a
DirectWrite font-face object.
Notes
 chrisccoulson> Windows-specific
Assigned-to
chrisccoulson
Package
Upstream:released (31.0)
Ubuntu 14.04 LTS (Trusty Tahr):not-affected
Package
Priority: Low
Upstream:released (31.0)
Ubuntu 14.04 LTS (Trusty Tahr):not-affected
More Information

Updated: 2019-03-26 12:12:40 UTC (commit ccdecfcf0fead22bd291e5f4ea745a46872dcb15)