7 matches found
Thunderbird Data Compromise
The use of the MediaInputPort class after its release allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory by using incorrect control messages from Web Audio...
CVE-2014-1550
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...
CVE-2014-1550
CVE-2014-1550 is a use-after-free in Mozilla Firefox (before 31.0) and Thunderbird (before 31.0) affecting the MediaInputPort class. The underlying issue is a heap memory corruption caused by incorrect Web Audio control-message ordering, which could allow a remote attacker to execute arbitrary co...
CVE-2014-1550
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...
CVE-2014-1550: Undefined Security Weakness
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...
CVE-2014-1550
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...
PT-2014-1465
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 31.0 Thunderbird versions prior to 31.0 Description The issue is related to a use-after-free vulnerability in the MediaInputPort class, which allows remote attackers to execute arbitrary code or cause a denial...