CVE-2014-1577

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and…

published October 15, 2014

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via an invalid custom waveform that triggers a calculation of a negative frequency value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02896 · 86.7th percentile
Published
2014-10-15T10:00Z
EPSS history
Timeline
  • 15 OCT 10:00Z
    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and…
    cvelistv5