PT-2015-4071 · Mozilla+3 · Firefox+4

Holger Fuhrmannek · Published 2015-01-13 · Updated 2024-12-12 · CVE-2014-8640

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 35.0 SeaMonkey versions prior to 2.32

Description The issue concerns the Web Audio API implementation, specifically the mozilla::dom::AudioParamTimeline::AudioNodeInputValue function. This function does not properly restrict timeline operations, allowing remote attackers to cause a denial of service. The denial of service can be achieved through crafted API calls, resulting in an uninitialized-memory read and application crash.

Recommendations For Mozilla Firefox versions prior to 35.0, update to version 35.0 or later to resolve the issue. For SeaMonkey versions prior to 2.32, update to version 2.32 or later to resolve the issue.

Exploit

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2015-1082

ALT-PU-2015-1112

ALT-PU-2015-1464

CVE-2014-8640

MGASA-2015-0028

OPENSUSE-SU-2015_0077-1

OPENSUSE-SU-2015_0077-2

OPENSUSE-SU-2015_0192-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

USN-2458-1

USN-2458-2

USN-2458-3

Affected Products

Alt Linux

Firefox

Seamonkey

Suse

Ubuntu

References · 2235

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• https://bdu.fstec.ru/vul/2015-09904 · Security Note
• https://bdu.fstec.ru/vul/2015-09888 · Security Note
• https://ubuntu.com/security/CVE-2014-8642 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09892 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1584 · Security Note
• https://ubuntu.com/security/notices/USN-2458-2 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581 · Security Note
• https://bdu.fstec.ru/vul/2015-09816 · Security Note
• https://bdu.fstec.ru/vul/2015-09901 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0824 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2717 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716 · Security Note