CVE

Id
68872  
CVE No.
CVE-2014-1577  
Status
Candidate  
Description
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via an invalid custom waveform that triggers a calculation of a negative frequency value.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662557 68872 CVE-2014-1577 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-76.html  View
662558 68872 CVE-2014-1577 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1012609  View
662559 68872 CVE-2014-1577 CONFIRM:https://advisories.mageia.org/MGASA-2014-0421.html  View
662560 68872 CVE-2014-1577 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
662561 68872 CVE-2014-1577 DEBIAN:DSA-3050  View
662562 68872 CVE-2014-1577 URL:http://www.debian.org/security/2014/dsa-3050  View
662563 68872 CVE-2014-1577 DEBIAN:DSA-3061  View
662564 68872 CVE-2014-1577 URL:http://www.debian.org/security/2014/dsa-3061  View
662565 68872 CVE-2014-1577 FEDORA:FEDORA-2014-13042  View
662566 68872 CVE-2014-1577 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html  View
662567 68872 CVE-2014-1577 FEDORA:FEDORA-2014-14084  View
662568 68872 CVE-2014-1577 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html  View
662569 68872 CVE-2014-1577 GENTOO:GLSA-201504-01  View
662570 68872 CVE-2014-1577 URL:https://security.gentoo.org/glsa/201504-01  View
662571 68872 CVE-2014-1577 REDHAT:RHSA-2014:1635  View
662572 68872 CVE-2014-1577 URL:http://rhn.redhat.com/errata/RHSA-2014-1635.html  View
662573 68872 CVE-2014-1577 REDHAT:RHSA-2014:1647  View
662574 68872 CVE-2014-1577 URL:http://rhn.redhat.com/errata/RHSA-2014-1647.html  View
662575 68872 CVE-2014-1577 SUSE:openSUSE-SU-2014:1343  View
662576 68872 CVE-2014-1577 URL:http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html  View
662577 68872 CVE-2014-1577 SUSE:openSUSE-SU-2014:1346  View
662578 68872 CVE-2014-1577 URL:http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html  View
662579 68872 CVE-2014-1577 SUSE:openSUSE-SU-2014:1344  View
662580 68872 CVE-2014-1577 URL:http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html  View
662581 68872 CVE-2014-1577 SUSE:openSUSE-SU-2014:1345  View
662582 68872 CVE-2014-1577 URL:http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html  View
662583 68872 CVE-2014-1577 SUSE:openSUSE-SU-2015:0138  View
662584 68872 CVE-2014-1577 URL:http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html  View
662585 68872 CVE-2014-1577 SUSE:openSUSE-SU-2015:1266  View
662586 68872 CVE-2014-1577 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
662587 68872 CVE-2014-1577 UBUNTU:USN-2372-1  View
662588 68872 CVE-2014-1577 URL:http://www.ubuntu.com/usn/USN-2372-1  View
662589 68872 CVE-2014-1577 UBUNTU:USN-2373-1  View
662590 68872 CVE-2014-1577 URL:http://www.ubuntu.com/usn/USN-2373-1  View
662591 68872 CVE-2014-1577 BID:70440  View
662592 68872 CVE-2014-1577 URL:http://www.securityfocus.com/bid/70440  View
662593 68872 CVE-2014-1577 SECTRACK:1031028  View
662594 68872 CVE-2014-1577 URL:http://www.securitytracker.com/id/1031028  View
662595 68872 CVE-2014-1577 SECTRACK:1031030  View
662596 68872 CVE-2014-1577 URL:http://www.securitytracker.com/id/1031030  View
662597 68872 CVE-2014-1577 SECUNIA:61387  View
662598 68872 CVE-2014-1577 URL:http://secunia.com/advisories/61387  View
662599 68872 CVE-2014-1577 SECUNIA:61854  View
662600 68872 CVE-2014-1577 URL:http://secunia.com/advisories/61854  View
662601 68872 CVE-2014-1577 SECUNIA:62021  View
662602 68872 CVE-2014-1577 URL:http://secunia.com/advisories/62021  View
662603 68872 CVE-2014-1577 SECUNIA:62022  View
662604 68872 CVE-2014-1577 URL:http://secunia.com/advisories/62022  View
662605 68872 CVE-2014-1577 SECUNIA:62023  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16022 JVNDB-2014-004897 Mozilla Firefox の dom/media/MediaManager.cpp の WebRTC 動画共有機能における重要な情報を取得される脆弱性 Mozilla Firefox の dom/media/MediaManager.cpp の WebRTC 動画共有機能は、IFRAME 要素内の動画に対する共有中止 (Stop Sharing) アクションを適切に認識しないため、ローカルカメラから重要な情報を取得される脆弱性が存在します。 CVE-2014-1585 68872 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004897.html  View