CVE

Id
68837  
CVE No.
CVE-2014-1542  
Status
Candidate  
Description
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
661737 68837 CVE-2014-1542 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-53.html  View
661738 68837 CVE-2014-1542 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=991533  View
661739 68837 CVE-2014-1542 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
661740 68837 CVE-2014-1542 GENTOO:GLSA-201504-01  View
661741 68837 CVE-2014-1542 URL:https://security.gentoo.org/glsa/201504-01  View
661742 68837 CVE-2014-1542 SUSE:openSUSE-SU-2014:0855  View
661743 68837 CVE-2014-1542 URL:http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html  View
661744 68837 CVE-2014-1542 BID:67968  View
661745 68837 CVE-2014-1542 URL:http://www.securityfocus.com/bid/67968  View
661746 68837 CVE-2014-1542 SECTRACK:1030388  View
661747 68837 CVE-2014-1542 URL:http://www.securitytracker.com/id/1030388  View
661748 68837 CVE-2014-1542 SECUNIA:59052  View
661749 68837 CVE-2014-1542 URL:http://secunia.com/advisories/59052  View
661750 68837 CVE-2014-1542 SECUNIA:59171  View
661751 68837 CVE-2014-1542 URL:http://secunia.com/advisories/59171  View
661752 68837 CVE-2014-1542 SECUNIA:59866  View
661753 68837 CVE-2014-1542 URL:http://secunia.com/advisories/59866  View
661754 68837 CVE-2014-1542 SECUNIA:59387  View
661755 68837 CVE-2014-1542 URL:http://secunia.com/advisories/59387  View
661756 68837 CVE-2014-1542 SECUNIA:59486  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14655 JVNDB-2014-003530 Mozilla Firefox および Thunderbird の MediaInputPort クラスにおける任意のコードを実行される脆弱性 Mozilla Firefox および Thunderbird の MediaInputPort クラスには、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-1550 68837 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003530.html  View