CVE-2014-1549

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0855-1)

seamonkey was updated to version 2.26.1 to fix nine security issues. These security issues were fixed : - Miscellaneous memory safety hazards CVE-2014-1533/CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 -...

openSUSE Security Update : chromium (openSUSE-SU-2014:0065-1)

Update to Chromium 31.0.1650.63 Stable channel update : - Security fixes : - CVE-2013-6634: Session fixation in sync related to 302 redirects - CVE-2013-6635: Use-after-free in editing - CVE-2013-6636: Address bar spoofing related to modal dialogs - CVE-2013-6637: Various fixes from internal...

openSUSE Security Update : chromium (openSUSE-SU-2014:0601-1)

This chromium version update fixes the following security and non-security issues : - Add patch chromium-fix-arm-skia-memset.patch to resolve a linking issue on ARM with regards to missing symbols. - Add patch armusegold.patch to use the right gold binaries on ARM. Hopefully this resolves the bui...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0629-1)

This is a SeaMonkey update to version 2.26 : - MFSA 2014-34/CVE-2014-1518/CVE-2014-1519 Miscellaneous memory safety hazards - MFSA 2014-36/CVE-2014-1522 bmo995289 Web Audio memory corruption issues - MFSA 2014-37/CVE-2014-1523 bmo969226 Out of bounds read while decoding JPG images - MFSA...

Updated iceape packages fix multiple vulnerabilities

Updated iceape packages fix security issues: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service memory corruption and...

USN-2243-1: Firefox vulnerabilities

Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner, Benoit Jacob and Karl Tomlinson discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted...

USN-2243-1 firefox vulnerabilities

Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner, Benoit Jacob and Karl Tomlinson discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted...

CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

Buffer overflow

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

UBUNTU-CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

CVE-2014-1542

CVE-2014-1542 refers to a buffer overflow in the Speex resampler within the Web Audio subsystem of Mozilla Firefox, exploitable via crafted AudioBuffer parameters to achieve remote code execution. The vulnerability affects Firefox prior to version 30.0. The provided connected documents corroborat...

Firefox < 30.0 Multiple Vulnerabilities

The version of Firefox installed on the remote host is a version prior to 30.0 and is, therefore, affected by the following vulnerabilities : - Memory issues exist that could lead to arbitrary code execution. Note that these issues only affect Firefox 29. CVE-2014-1533, CVE-2014-1534 - An...

CVE-2014-1542: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

PT-2014-1462

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 30.0 Description The issue is related to a buffer overflow in the Speex resampler in the Web Audio subsystem, allowing remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer...

Mozilla Firefox < 30.0 Multiple Vulnerabilities

Binary data 8290.prm...

Buffer overflow in Web Audio Speex resampler — Mozilla

Security researcher Holger Fuhrmannek used the used the Address Sanitizer tool to discover a buffer overflow with the Speex resampler in Web Audio when working with audio content that exceeds expected bounds. This leads to a potentially exploitable crash...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2014-48 Miscellaneous memory safety hazards rv:30.0 / rv:24.6 MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer MFSA 2014-51 Use-after-free in Event Listener Manager MFSA 2014-52 Use-after-free with SMIL Animation Controller MFSA...