CVE-2014-8641

EPSS 1.84%
Veröffentlicht 14.01.2015 11:59:09
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 29

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Seamonkey Version <= 2.31

Mozilla ≫ Firefox Version31.0

Mozilla ≫ Firefox Version31.1.0

Mozilla ≫ Firefox Version31.1.1

Mozilla ≫ Firefox Version31.3.0

Mozilla ≫ Firefox ESR Version31.2

Mozilla ≫ Firefox Version <= 34.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.84%	0.813

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

https://security.gentoo.org/glsa/201504-01

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html

http://linux.oracle.com/errata/ELSA-2015-0046.html

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html

http://rhn.redhat.com/errata/RHSA-2015-0046.html

http://secunia.com/advisories/62237

http://secunia.com/advisories/62242

http://secunia.com/advisories/62250

http://secunia.com/advisories/62253

http://secunia.com/advisories/62273

http://secunia.com/advisories/62293

http://secunia.com/advisories/62313

http://secunia.com/advisories/62316

http://secunia.com/advisories/62418

http://secunia.com/advisories/62446

http://secunia.com/advisories/62790

http://www.debian.org/security/2015/dsa-3127

http://www.securitytracker.com/id/1031533

http://www.mozilla.org/security/announce/2014/mfsa2015-06.html

Vendor Advisory

http://www.securityfocus.com/bid/72044

https://bugzilla.mozilla.org/show_bug.cgi?id=1108455

https://exchange.xforce.ibmcloud.com/vulnerabilities/99961

https://nvd.nist.gov/vuln/detail/CVE-2014-8641

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8641

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8641

EUVD