CVE:CVE-2014-1525
CNNVD:CNNVD-201404-590
Mozilla Firefox和SeaMonkey都是由美国Mozilla基金会开发。Firefox是一款开源Web浏览器。SeaMonkey是一套免费、开源以及跨平台的网络套装软件。
Mozilla Firefox 28.0及之前的版本和SeaMonkey 2.26:rc1及之前的版本中的‘mozilla::dom::TextTrack::AddCue’函数存在安全漏洞，该漏洞源于程序没有正确的对Text Track Manager变量执行垃圾信息搜集。远程攻击者可借助HTML文件中特制的VIDEO元素利用该漏洞执行任意代码或造成拒绝服务（释放后重用和堆内存损坏）。
solution:Upgrade mozilla firefox to a higher version than 29.0,and avoid the version (,29.0); Upgrade mozilla seamonkey to a higher version than 2.26,and avoid the version (,2.26); Upgrade canonical ubuntu_linux to a higher version than 12.04,12.10,13.10,14.04,and avoid the version 12.04,12.10,13.10,14.04; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1; Upgrade fedoraproject fedora to a higher version than 19,and avoid the version 19