NVD

Id
35644  
Name
CVE-2014-8643  
Description
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin"s process.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-19  
Published
2015-01-14  
Modified Date
2017-01-02  
Seq
2014-8643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182592 35644 CVE-2014-8643 openSUSE-SU-2015:0077  View
182593 35644 CVE-2014-8643 openSUSE-SU-2015:0192  View
182594 35644 CVE-2014-8643 62253  View
182595 35644 CVE-2014-8643 http://www.mozilla.org/security/announce/2014/mfsa2015-07.html  View
182596 35644 CVE-2014-8643 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
182597 35644 CVE-2014-8643 72043  View
182598 35644 CVE-2014-8643 1031533  View
182599 35644 CVE-2014-8643 firefox-cve20148643-sec-bypass(99962)  View
182600 35644 CVE-2014-8643 https://bugzilla.mozilla.org/show_bug.cgi?id=1117140  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18718 JVNDB-2014-007593 Windows 上で稼動する Mozilla Firefox における Gecko Media Plugin サンドボックス保護メカニズムを回避される脆弱性 Windows 上で稼動する Mozilla Firefox には、Gecko Media Plugin (GMP) サンドボックス保護メカニズムを回避される脆弱性が存在します。 CVE-2014-8643 75936 CVE-2014-8643 35644 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007593.html 2014-11-06 2015-01-15 View