CVE-2014-1564

Name	CVE-2014-1564
Description	Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
icedove (PTS)	jessie	1:52.3.0-4~deb8u2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency
icedove	source	squeeze	(unfixed)	end-of-life
icedove	source	wheezy	(not affected)
icedove	source	(unstable)	31.2.0-1
iceweasel	source	squeeze	(unfixed)	end-of-life
iceweasel	source	wheezy	(not affected)
iceweasel	source	(unstable)	31.1.0esr-1

[wheezy] - iceweasel <not-affected> (Only affects releases after ESR24)
[wheezy] - icedove <not-affected> (Only affects releases after ESR24)