CVE

Id
68860  
CVE No.
CVE-2014-1565  
Status
Candidate  
Description
The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662232 68860 CVE-2014-1565 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-70.html  View
662233 68860 CVE-2014-1565 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1047831  View
662234 68860 CVE-2014-1565 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
662235 68860 CVE-2014-1565 GENTOO:GLSA-201504-01  View
662236 68860 CVE-2014-1565 URL:https://security.gentoo.org/glsa/201504-01  View
662237 68860 CVE-2014-1565 SUSE:openSUSE-SU-2014:1098  View
662238 68860 CVE-2014-1565 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html  View
662239 68860 CVE-2014-1565 SUSE:openSUSE-SU-2014:1099  View
662240 68860 CVE-2014-1565 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html  View
662241 68860 CVE-2014-1565 SUSE:openSUSE-SU-2015:0138  View
662242 68860 CVE-2014-1565 URL:http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html  View
662243 68860 CVE-2014-1565 SUSE:openSUSE-SU-2015:1266  View
662244 68860 CVE-2014-1565 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
662245 68860 CVE-2014-1565 BID:69521  View
662246 68860 CVE-2014-1565 URL:http://www.securityfocus.com/bid/69521  View
662247 68860 CVE-2014-1565 SECTRACK:1030793  View
662248 68860 CVE-2014-1565 URL:http://www.securitytracker.com/id/1030793  View
662249 68860 CVE-2014-1565 SECTRACK:1030794  View
662250 68860 CVE-2014-1565 URL:http://www.securitytracker.com/id/1030794  View
662251 68860 CVE-2014-1565 SECUNIA:60148  View
662252 68860 CVE-2014-1565 URL:http://secunia.com/advisories/60148  View
662253 68860 CVE-2014-1565 SECUNIA:61114  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15951 JVNDB-2014-004826 Bugzilla におけるクロスサイトスクリプティングの脆弱性 Bugzilla には、特定の CGI パラメータに使用するスカラーコンテキストを確認しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2014-1573 68860 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004826.html  View