Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-kcmm-pwr4-cqcm
Vulnerability ID VCID-kcmm-pwr4-cqcm
Aliases CVE-2014-1539
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, and SeaMonkey, the worst of which may allow user-assisted execution of arbitrary code.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-20 Improper Input Validation
System Score Found at
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
epss 0.0075 https://api.first.org/data/v1/epss?cve=CVE-2014-1539
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2014-1539
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2014-50
Reference id Reference type URL
http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
https://api.first.org/data/v1/epss?cve=CVE-2014-1539
https://bugzilla.mozilla.org/show_bug.cgi?id=995603
http://secunia.com/advisories/59171
http://secunia.com/advisories/59387
http://secunia.com/advisories/59486
http://www.mozilla.org/security/announce/2014/mfsa2014-50.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/67967
http://www.securitytracker.com/id/1030388
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.1.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:24.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
CVE-2014-1539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1539
CVE-2014-1539 https://nvd.nist.gov/vuln/detail/CVE-2014-1539
GLSA-201504-01 https://security.gentoo.org/glsa/201504-01
mfsa2014-50 https://www.mozilla.org/en-US/security/advisories/mfsa2014-50
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2014-1539
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.73083
EPSS Score 0.0075
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:13:51.621395+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201504-01 38.0.0