Buffer Overflow in Mozilla Firefox Web Audio Subsystem Vulnerability
CVE-2014-1542

Currently unrated

Key Information:

Vendor

Opensuse Project

Status
Opensuse
Vendor
CVE Published:
11 June 2014

What is CVE-2014-1542?

A buffer overflow vulnerability exists in the Speex resampler of the Web Audio subsystem in Mozilla Firefox, prior to version 30.0. This flaw allows remote attackers to exploit crafted AudioBuffer settings, potentially leading to arbitrary code execution. Attackers may target specific audio data attributes, such as channel count and sample rate, to manipulate memory and execute malicious code within the browser environment.

References

http://lists.opensuse.org/opensuse-updates/2014-06/msg000...
vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/59387
third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id/1030388
vdb-entryx_refsource_SECTRACK

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.