Lucene search

K
nvd[email protected]NVD:CVE-2014-1550
HistoryJul 23, 2014 - 11:12 a.m.

CVE-2014-1550

2014-07-2311:12:42
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.

Affected configurations

NVD
Node
mozillafirefoxRange30.0
OR
mozillathunderbirdRange24.7
OR
mozillathunderbirdMatch24.0
OR
mozillathunderbirdMatch24.0.1
OR
mozillathunderbirdMatch24.1
OR
mozillathunderbirdMatch24.1.1
OR
mozillathunderbirdMatch24.2
OR
mozillathunderbirdMatch24.3
OR
mozillathunderbirdMatch24.4
OR
mozillathunderbirdMatch24.5
OR
mozillathunderbirdMatch24.6

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%