RHSA-2014:0448

Vulnerability from csaf_redhat - Published: 2014-04-29 22:45 - Updated: 2025-11-21 17:48
Summary
Red Hat Security Advisory: firefox security update
Severity
Critical
Notes
Topic: An updated firefox package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Details: Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1518, CVE-2014-1524, CVE-2014-1529, CVE-2014-1531) A use-after-free flaw was found in the way Firefox resolved hosts in certain circumstances. An attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2014-1532) An out-of-bounds read flaw was found in the way Firefox decoded JPEG images. Loading a web page containing a specially crafted JPEG image could cause Firefox to crash. (CVE-2014-1523) A flaw was found in the way Firefox handled browser navigations through history. An attacker could possibly use this flaw to cause the address bar of the browser to display a web page name while loading content from an entirely different web page, which could allow for cross-site scripting (XSS) attacks. (CVE-2014-1530) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bobby Holley, Carsten Book, Christoph Diehl, Gary Kwong, Jan de Mooij, Jesse Ruderman, Nathan Froyd, Christian Holler, Abhishek Arya, Mariusz Mlynski, moz_bug_r_a4, Nils, Tyson Smith, and Jesse Schwartzentrube as the original reporters of these issues. For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 24.5.0 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. All Firefox users should upgrade to this updated package, which contains Firefox version 24.5.0 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448

Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.

CWE-125 - Out-of-bounds Read
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448

The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448

The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448

Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.

CWE-416 - Use After Free
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448

Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.

CWE-416 - Use After Free
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 https://access.redhat.com/errata/RHSA-2014:0448
References
https://access.redhat.com/errata/RHSA-2014:0448 self
https://access.redhat.com/security/updates/classi… external
https://www.mozilla.org/security/known-vulnerabil… external
https://bugzilla.redhat.com/show_bug.cgi?id=1054242 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092657 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092660 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092663 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092664 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092666 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092668 external
https://bugzilla.redhat.com/show_bug.cgi?id=1092670 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2014-1518 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092657 external
https://www.cve.org/CVERecord?id=CVE-2014-1518 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1518 external
http://www.mozilla.org/security/announce/2014/mfs… external
https://access.redhat.com/security/cve/CVE-2014-1523 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092660 external
https://www.cve.org/CVERecord?id=CVE-2014-1523 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1523 external
http://www.mozilla.org/security/announce/2014/mfs… external
https://access.redhat.com/security/cve/CVE-2014-1524 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092663 external
https://www.cve.org/CVERecord?id=CVE-2014-1524 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1524 external
http://www.mozilla.org/security/announce/2014/mfs… external
https://access.redhat.com/security/cve/CVE-2014-1529 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092664 external
https://www.cve.org/CVERecord?id=CVE-2014-1529 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1529 external
http://www.mozilla.org/security/announce/2014/mfs… external
https://access.redhat.com/security/cve/CVE-2014-1530 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092666 external
https://www.cve.org/CVERecord?id=CVE-2014-1530 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1530 external
http://www.mozilla.org/security/announce/2014/mfs… external
https://access.redhat.com/security/cve/CVE-2014-1531 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092668 external
https://www.cve.org/CVERecord?id=CVE-2014-1531 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1531 external
http://www.mozilla.org/security/announce/2014/mfs… external
https://access.redhat.com/security/cve/CVE-2014-1532 self
https://bugzilla.redhat.com/show_bug.cgi?id=1092670 external
https://www.cve.org/CVERecord?id=CVE-2014-1532 external
https://nvd.nist.gov/vuln/detail/CVE-2014-1532 external
http://www.mozilla.org/security/announce/2014/mfs… external
Acknowledgments
Mozilla project
Abhishek Arya
Mariusz Mlynski
moz_bug_r_a4
Nils
Tyson Smith
BlackBerry Security Automated Analysis Team Jesse Schwartzentruber

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated firefox package that fixes several security issues is now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Firefox is an open source web browser.\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2014-1518, CVE-2014-1524, CVE-2014-1529, CVE-2014-1531)\n\nA use-after-free flaw was found in the way Firefox resolved hosts in\ncertain circumstances. An attacker could use this flaw to crash Firefox or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2014-1532)\n\nAn out-of-bounds read flaw was found in the way Firefox decoded JPEG\nimages. Loading a web page containing a specially crafted JPEG image could\ncause Firefox to crash. (CVE-2014-1523)\n\nA flaw was found in the way Firefox handled browser navigations through\nhistory. An attacker could possibly use this flaw to cause the address bar\nof the browser to display a web page name while loading content from an\nentirely different web page, which could allow for cross-site scripting\n(XSS) attacks. (CVE-2014-1530)\n\nRed Hat would like to thank the Mozilla project for reporting these issues.\nUpstream acknowledges Bobby Holley, Carsten Book, Christoph Diehl, Gary\nKwong, Jan de Mooij, Jesse Ruderman, Nathan Froyd, Christian Holler,\nAbhishek Arya, Mariusz Mlynski, moz_bug_r_a4, Nils, Tyson Smith, and Jesse\nSchwartzentrube as the original reporters of these issues.\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Firefox 24.5.0 ESR. You can find a link to the Mozilla\nadvisories in the References section of this erratum.\n\nAll Firefox users should upgrade to this updated package, which contains\nFirefox version 24.5.0 ESR, which corrects these issues. After installing\nthe update, Firefox must be restarted for the changes to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0448",
        "url": "https://access.redhat.com/errata/RHSA-2014:0448"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#firefox24.5",
        "url": "https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#firefox24.5"
      },
      {
        "category": "external",
        "summary": "1054242",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1054242"
      },
      {
        "category": "external",
        "summary": "1092657",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092657"
      },
      {
        "category": "external",
        "summary": "1092660",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092660"
      },
      {
        "category": "external",
        "summary": "1092663",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092663"
      },
      {
        "category": "external",
        "summary": "1092664",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092664"
      },
      {
        "category": "external",
        "summary": "1092666",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092666"
      },
      {
        "category": "external",
        "summary": "1092668",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092668"
      },
      {
        "category": "external",
        "summary": "1092670",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092670"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0448.json"
      }
    ],
    "title": "Red Hat Security Advisory: firefox security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:48:03+00:00",
      "generator": {
        "date": "2025-11-21T17:48:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2014:0448",
      "initial_release_date": "2014-04-29T22:45:40+00:00",
      "revision_history": [
        {
          "date": "2014-04-29T22:45:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-29T22:45:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:48:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.10.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server-5.10.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el5_10.i386",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el5_10.i386",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el5_10?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.i386",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.i386",
                  "product_id": "firefox-0:24.5.0-1.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.x86_64",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.x86_64",
                  "product_id": "firefox-0:24.5.0-1.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el6_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.x86_64",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.x86_64",
                  "product_id": "firefox-0:24.5.0-1.el6_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.src",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.src",
                  "product_id": "firefox-0:24.5.0-1.el5_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.src",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.src",
                  "product_id": "firefox-0:24.5.0-1.el6_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.s390x",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.s390x",
                  "product_id": "firefox-0:24.5.0-1.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el6_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.s390x",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.s390x",
                  "product_id": "firefox-0:24.5.0-1.el6_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el5_10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el5_10?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.s390",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.s390",
                  "product_id": "firefox-0:24.5.0-1.el5_10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el6_5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.s390",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.s390",
                  "product_id": "firefox-0:24.5.0-1.el6_5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el5_10?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.ia64",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.ia64",
                  "product_id": "firefox-0:24.5.0-1.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el5_10.ppc",
                "product": {
                  "name": "firefox-0:24.5.0-1.el5_10.ppc",
                  "product_id": "firefox-0:24.5.0-1.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el6_5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.ppc",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.ppc",
                  "product_id": "firefox-0:24.5.0-1.el6_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el6_5?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.i686",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.i686",
                  "product_id": "firefox-0:24.5.0-1.el6_5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
                "product": {
                  "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
                  "product_id": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@24.5.0-1.el6_5?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:24.5.0-1.el6_5.ppc64",
                "product": {
                  "name": "firefox-0:24.5.0-1.el6_5.ppc64",
                  "product_id": "firefox-0:24.5.0-1.el6_5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@24.5.0-1.el6_5?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.i386",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.s390",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.src",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.i386",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.s390",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Client-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.s390",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.src",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-0:24.5.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.s390",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.src",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Client-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.src",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Server-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.src",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.i686",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
        "relates_to_product_reference": "6Workstation-6.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
        "relates_to_product_reference": "6Workstation-6.5.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2014-1518",
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092657"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092657",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092657"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1518"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-34.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-34.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1523",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1523"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1523"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-37.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-37.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1524",
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092663"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1524"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092663",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092663"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1524",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1524"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1524",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1524"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-38.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-38.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1529",
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092664"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1529"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092664",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092664"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1529",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1529"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1529",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1529"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-42.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-42.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "moz_bug_r_a4"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1530",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092666"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1530"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092666",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092666"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1530",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1530"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1530",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1530"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-43.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-43.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1531",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092668"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1531"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092668",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092668"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1531",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1531"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1531",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1531"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-44.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-44.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Tyson Smith"
          ],
          "summary": "Acknowledged by upstream."
        },
        {
          "names": [
            "Jesse Schwartzentruber"
          ],
          "organization": "BlackBerry Security Automated Analysis Team",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-1532",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2014-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1092670"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
          "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
          "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
          "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
          "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1532"
        },
        {
          "category": "external",
          "summary": "RHBZ#1092670",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092670"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1532",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1532"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1532",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1532"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-46.html",
          "url": "http://www.mozilla.org/security/announce/2014/mfsa2014-46.html"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-29T22:45:40+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0448"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Client-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Client-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.src",
            "5Server-5.10.Z:firefox-0:24.5.0-1.el5_10.x86_64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.i386",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ia64",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.ppc",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.s390x",
            "5Server-5.10.Z:firefox-debuginfo-0:24.5.0-1.el5_10.x86_64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Client-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Client-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6ComputeNode-optional-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6ComputeNode-optional-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Server-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Server-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.src",
            "6Workstation-6.5.z:firefox-0:24.5.0-1.el6_5.x86_64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.i686",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.ppc64",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.s390x",
            "6Workstation-6.5.z:firefox-debuginfo-0:24.5.0-1.el6_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…