CVE

Id
68844  
CVE No.
CVE-2014-1549  
Status
Candidate  
Description
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
661916 68844 CVE-2014-1549 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-57.html  View
661917 68844 CVE-2014-1549 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1020205  View
661918 68844 CVE-2014-1549 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
661919 68844 CVE-2014-1549 GENTOO:GLSA-201504-01  View
661920 68844 CVE-2014-1549 URL:https://security.gentoo.org/glsa/201504-01  View
661921 68844 CVE-2014-1549 BID:68820  View
661922 68844 CVE-2014-1549 URL:http://www.securityfocus.com/bid/68820  View
661923 68844 CVE-2014-1549 SECTRACK:1030619  View
661924 68844 CVE-2014-1549 URL:http://www.securitytracker.com/id/1030619  View
661925 68844 CVE-2014-1549 SECTRACK:1030620  View
661926 68844 CVE-2014-1549 URL:http://www.securitytracker.com/id/1030620  View
661927 68844 CVE-2014-1549 SECUNIA:59760  View
661928 68844 CVE-2014-1549 URL:http://secunia.com/advisories/59760  View
661929 68844 CVE-2014-1549 SECUNIA:60628  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14660 JVNDB-2014-003535 Mozilla Firefox および Thunderbird で使用される Skia の ConvolveHorizontally 関数における任意のコードを実行される脆弱性 Mozilla Firefox および Thunderbird で使用される Skia の ConvolveHorizontally 関数は、関数の実行中に画像データの破棄を適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2014-1557 68844 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003535.html  View