CVE-2014-1576

CVE-2014-1576 describes a heap-based buffer overflow in the nsTransformedTextRun function affecting Mozilla Firefox (before 33.0, ESR 31.x before 31.2) and Thunderbird (31.x before 31.2). This vulnerability can be triggered by remote attackers using specific CSS token sequences that manipulate capitalization styles. With a CVSS score of 7.5, it is considered high severity, allowing for potential arbitrary code execution with low attack complexity and no authentication required. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.