Unrated severityNVD Advisory· Published Apr 30, 2014· Updated May 6, 2026
CVE-2014-1528
CVE-2014-1528
Description
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
Affected products
10- cpe:2.3:a:mozilla:firefox:28.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:seamonkey:2.25:-:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-updates/2014-05/msg00010.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-updates/2014-05/msg00033.htmlnvdThird Party Advisory
- www.mozilla.org/security/announce/2014/mfsa2014-41.htmlnvdVendor Advisory
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlnvdThird Party Advisory
- www.securitytracker.com/id/1030163nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1030164nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-2185-1nvdThird Party Advisory
- secunia.com/advisories/59866nvdPermissions Required
- bugzilla.mozilla.org/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.