Vulnerability Description
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opensuse | Opensuse | 13.1 |
| Opensuse Project | Opensuse | 12.3 |
| Mozilla | Firefox | <= 29.0.1 |
| Oracle | Solaris | 11.3 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.htmlThird Party Advisory
- http://secunia.com/advisories/59052Permissions Required
- http://secunia.com/advisories/59171Permissions Required
- http://secunia.com/advisories/59387Permissions Required
- http://secunia.com/advisories/59486
- http://secunia.com/advisories/59866Permissions Required
- http://www.mozilla.org/security/announce/2014/mfsa2014-53.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.securityfocus.com/bid/67968Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1030388Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2243-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=991533Issue Tracking
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
FAQ
What is CVE-2014-1542?
CVE-2014-1542 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel ...
How severe is CVE-2014-1542?
CVE-2014-1542 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-1542?
Check the references section above for vendor advisories and patch information. Affected products include: Opensuse Opensuse, Opensuse Project Opensuse, Mozilla Firefox, Oracle Solaris.