Lucene search

K
cve[email protected]CVE-2014-1543
HistoryJun 11, 2014 - 10:57 a.m.

CVE-2014-1543

2014-06-1110:57:18
CWE-119
web.nvd.nist.gov
30
cve-2014-1543
buffer overflows
gamepad api
mozilla firefox
remote code execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

AI Score

Confidence

High

0.281 Low

EPSS

Percentile

96.9%

Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device.

Affected configurations

NVD
Node
mozillafirefoxRange29.0.1
CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle29.0.1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

AI Score

Confidence

High

0.281 Low

EPSS

Percentile

96.9%