Search for vulnerabilities
Vulnerability details: VCID-dwyq-k1et-b7dv
Vulnerability ID VCID-dwyq-k1et-b7dv
Aliases CVE-2014-1486
Summary Security researcher Arthur Gerkis, via TippingPoint's Zero Day Initiative, reported a use-after-free during image processing from sites with specific content types in concert with the imgRequestProxy function. This causes a potentially exploitable crash. In general this flaw cannot be exploited through email in the Thunderbird and Seamonkey products because scripting is disabled in mail, but is potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
epss 0.10821 https://api.first.org/data/v1/epss?cve=CVE-2014-1486
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2014-08
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1486.json
https://api.first.org/data/v1/epss?cve=CVE-2014-1486
1060945 https://bugzilla.redhat.com/show_bug.cgi?id=1060945
CVE-2014-1486 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1486
mfsa2014-08 https://www.mozilla.org/en-US/security/advisories/mfsa2014-08
RHSA-2014:0132 https://access.redhat.com/errata/RHSA-2014:0132
RHSA-2014:0133 https://access.redhat.com/errata/RHSA-2014:0133
USN-2102-1 https://usn.ubuntu.com/2102-1/
USN-2119-1 https://usn.ubuntu.com/2119-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.93059
EPSS Score 0.10821
Published At Aug. 8, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:44.201524+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2014/mfsa2014-08.md 37.0.0