Intrusion PreventionMozilla.Firefox.DOMSVGLength.Ref.Attribute.Memory.Corruption
Description
This indicates an attack attempt against a Memory Corruption vulnerability in Mozilla products.
The vulnerability is caused by an error when the vulnerable software handles a malformed DOMSVGLength object. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the application.
Affected Products
Mozilla Foundation Firefox prior to 32
Mozilla Foundation Firefox ESR prior to 31.1
Mozilla Foundation Thunderbird prior to 31.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.mozilla.org/security/announce/2014/mfsa2014-68.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 39215 |
| Created | Oct 09, 2014 |
| Updated | Nov 04, 2021 |
| Risk |
|
| CVE ID | CVE-2014-1563 |
| Exploit Prediction Score | 69.27% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Mozilla |