NVD

Id
30174  
Name
CVE-2014-1549  
Description
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-07-23  
Modified Date
2017-01-06  
Seq
2014-1549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159387 30174 CVE-2014-1549 59760  View
159388 30174 CVE-2014-1549 60628  View
159389 30174 CVE-2014-1549 http://www.mozilla.org/security/announce/2014/mfsa2014-57.html  View
159390 30174 CVE-2014-1549 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159391 30174 CVE-2014-1549 68820  View
159392 30174 CVE-2014-1549 1030619  View
159393 30174 CVE-2014-1549 1030620  View
159394 30174 CVE-2014-1549 https://bugzilla.mozilla.org/show_bug.cgi?id=1020205  View
159395 30174 CVE-2014-1549 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14654 JVNDB-2014-003529 Mozilla Firefox および Thunderbird の mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer 関数における任意のコードを実行される脆弱性 Mozilla Firefox および Thunderbird の mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer 関数は、Web Audio バッファメモリを適切に割り当てないため、任意のコードを実行される、またはサービス運用妨害 (バッファオーバーフローおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-1549 68836 CVE-2014-1549 30174 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003529.html 2014-07-22 2014-07-24 View