CVE-2014-1565 in Firefox
Summary
The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/16/2014
Disclosure
09/03/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67445 | Mozilla Firefox/Thunderbird Web Audio memory corruption | 119 | Unproven | Official fix | CVE-2014-1565 |