{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Use-after-free in the Text Track Manager for HTML video (MFSA 2014-39)",
    "tracking": {
      "current_release_date": "2026-08-11T13:57:04+00:00",
      "generator": {
        "date": "2026-08-11T13:57:04+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-1525",
      "initial_release_date": "2014-04-29T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T13:57:04+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 5.11",
            "product": {
              "name": "Red Hat Enterprise Linux 5.11",
              "product_id": "rhel-5.11.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-6-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-1525",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2014-05-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5 and 6",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "rhel-5.11.z.els:firefox.src",
          "rhel-5.11.z.els:thunderbird.src",
          "rhel-6-els.els:firefox",
          "rhel-6-els.els:firefox.src",
          "rhel-6-els.els:thunderbird",
          "rhel-6-els.els:thunderbird.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1525"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1525"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1525"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore": 6.8
          },
          "products": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical",
          "product_ids": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src"
          ]
        }
      ],
      "title": "Use-after-free in the Text Track Manager for HTML video (MFSA 2014-39)"
    }
  ]
}