EUVD-2014-1641

Malware in sbrugna...

The vulnerability of Thunderbird software allows a malicious attacker to compromise the confidentiality of protected information.

A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability arises due to the improper creation of the audio data timeline. Exploiting this vulnerability allows maliciou...

CVE-2014-1565: Improper Restriction of Operations within the Bounds of a Memory Buffer

The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process...

PT-2014-1484

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 32.0 Mozilla Firefox ESR versions prior to 31.1 Thunderbird versions prior to 31.1 Description The issue exists in the mozilla::dom::AudioEventTimeline function within the Web Audio API implementation, due to...