VulnerabilityModified
CVE-2014-1542
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
MEDIUM 6.8EPSS 5.30%
Does this matter?
Lower severity and a low EPSS score (5.30%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 5.30% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- opensuse/opensuse · opensuse project/opensuse · mozilla/firefox · oracle/solaris
- Source
- security@mozilla.org
References
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.htmlThird Party Advisory
- http://secunia.com/advisories/59052Permissions Required
- http://secunia.com/advisories/59171Permissions Required
- http://secunia.com/advisories/59387Permissions Required
- http://secunia.com/advisories/59486
- http://secunia.com/advisories/59866Permissions Required
- http://www.mozilla.org/security/announce/2014/mfsa2014-53.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.securityfocus.com/bid/67968Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030388Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2243-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=991533Issue Tracking
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.htmlThird Party Advisory
- http://secunia.com/advisories/59052Permissions Required
- http://secunia.com/advisories/59171Permissions Required
- http://secunia.com/advisories/59387Permissions Required
- http://secunia.com/advisories/59486
- http://secunia.com/advisories/59866Permissions Required
- http://www.mozilla.org/security/announce/2014/mfsa2014-53.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.securityfocus.com/bid/67968Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030388Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2243-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=991533Issue Tracking
- https://security.gentoo.org/glsa/201504-01
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.