NVD

Id
30125  
Name
CVE-2014-1497  
Description
The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-19  
Modified Date
2016-12-21  
Seq
2014-1497  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158762 30125 CVE-2014-1497 SUSE-SU-2014:0418  View
158763 30125 CVE-2014-1497 openSUSE-SU-2014:0419  View
158764 30125 CVE-2014-1497 openSUSE-SU-2014:0448  View
158765 30125 CVE-2014-1497 openSUSE-SU-2014:0584  View
158766 30125 CVE-2014-1497 RHSA-2014:0310  View
158767 30125 CVE-2014-1497 RHSA-2014:0316  View
158768 30125 CVE-2014-1497 DSA-2881  View
158769 30125 CVE-2014-1497 http://www.mozilla.org/security/announce/2014/mfsa2014-17.html  View
158770 30125 CVE-2014-1497 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
158771 30125 CVE-2014-1497 66423  View
158772 30125 CVE-2014-1497 USN-2151-1  View
158773 30125 CVE-2014-1497 https://bugzilla.mozilla.org/show_bug.cgi?id=966311  View
158774 30125 CVE-2014-1497 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12851 JVNDB-2014-001726 複数の Mozilla 製品の mozilla::WaveReader::DecodeAudioData 機能における重要な情報を取得される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の mozilla::WaveReader::DecodeAudioData 機能には、プロセスのヒープメモリから重要な情報を取得される、サービス運用妨害 (out-of-bounds read およびアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-1497 68784 CVE-2014-1497 30125 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001726.html 2014-03-18 2014-04-08 View