CVE-2014-1542
CVE-2014-1542
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
EPSS 5.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
firefox Ubuntu:14.04:LTS
- Versions
- 24.0+build1-0ubuntu1
- 25.0+build3-0ubuntu0.13.10.1
- 28.0~b2+build1-0ubuntu2
- 28.0+build1-0ubuntu1
- 28.0+build2-0ubuntu1
- 28.0+build2-0ubuntu2
- 29.0+build1-0ubuntu0.14.04.2
- Affected ranges
- ECOSYSTEM: < 30.0+build1-0ubuntu0.14.04.3
Update to 30.0+build1-0ubuntu0.14.04.3
Original sources
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
- http://secunia.com/advisories/59387
- http://www.securitytracker.com/id/1030388
- http://secunia.com/advisories/59052
- http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=991533
- https://security.gentoo.org/glsa/201504-01
- http://secunia.com/advisories/59866
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-53.html
- http://www.securityfocus.com/bid/67968
- http://www.ubuntu.com/usn/USN-2243-1
- http://secunia.com/advisories/59171
- http://secunia.com/advisories/59486
- https://nvd.nist.gov/vuln/detail/CVE-2014-1542