NVD

Id
30190  
Name
CVE-2014-1565  
Description
The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-09-03  
Modified Date
2017-01-06  
Seq
2014-1565  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159581 30190 CVE-2014-1565 openSUSE-SU-2014:1098  View
159582 30190 CVE-2014-1565 openSUSE-SU-2015:0138  View
159583 30190 CVE-2014-1565 openSUSE-SU-2015:1266  View
159584 30190 CVE-2014-1565 openSUSE-SU-2014:1099  View
159585 30190 CVE-2014-1565 60148  View
159586 30190 CVE-2014-1565 61114  View
159587 30190 CVE-2014-1565 http://www.mozilla.org/security/announce/2014/mfsa2014-70.html  View
159588 30190 CVE-2014-1565 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159589 30190 CVE-2014-1565 69521  View
159590 30190 CVE-2014-1565 1030793  View
159591 30190 CVE-2014-1565 1030794  View
159592 30190 CVE-2014-1565 https://bugzilla.mozilla.org/show_bug.cgi?id=1047831  View
159593 30190 CVE-2014-1565 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15154 JVNDB-2014-004029 Mozilla Firefox および Thunderbird の Web Audio API の実装におけるプロセスメモリから重要な情報を取得される脆弱性 Mozilla Firefox および Thunderbird の Web Audio API の実装の mozilla::dom::AudioEventTimeline 関数は、音声タイムラインを適切に生成しないため、プロセスメモリから重要な情報を取得される、またはサービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2014-1565 68852 CVE-2014-1565 30190 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004029.html 2014-09-02 2014-09-04 View