Security Advisory

CVE-2014-1550

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-07-23 10:00:00
Last updated 2024-08-06 09:42:36
Assigner mozilla
State PUBLISHED

Description

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.