CVE-2014-8641

Currently unrated

Key Information:

Vendor
Mozilla
Status
Seamonkey
Vendor
CVE Published:
14 January 2015

Summary

Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.

References

http://rhn.redhat.com/errata/RHSA-2015-0046.html
vendor-advisoryx_refsource_REDHAT
http://www.mozilla.org/security/announce/2014/mfsa2015-06...
x_refsource_CONFIRM
http://secunia.com/advisories/62242
third-party-advisoryx_refsource_SECUNIA

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.