CVE-2014-1522

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
opensuseopensuse
12.3
opensuseopensuse
13.1
mozillafirefox
𝑥
< 29.0
mozillaseamonkey
𝑥
< 2.26
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
trusty
Fixed 29.0+build1-0ubuntu0.14.04.2
released
saucy
Fixed 29.0+build1-0ubuntu0.13.10.3
released
quantal
Fixed 29.0+build1-0ubuntu0.12.10.3
released
precise
Fixed 29.0+build1-0ubuntu0.12.04.2
released
lucid
ignored
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
http://secunia.com/advisories/59866
http://www.mozilla.org/security/announce/2014/mfsa2014-36.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1030163
http://www.securitytracker.com/id/1030164
http://www.ubuntu.com/usn/USN-2185-1
https://bugzilla.mozilla.org/show_bug.cgi?id=995289
https://security.gentoo.org/glsa/201504-01
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
http://secunia.com/advisories/59866
http://www.mozilla.org/security/announce/2014/mfsa2014-36.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1030163
http://www.securitytracker.com/id/1030164
http://www.ubuntu.com/usn/USN-2185-1
https://bugzilla.mozilla.org/show_bug.cgi?id=995289
https://security.gentoo.org/glsa/201504-01