CVE-2014-1522
HighSummary
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service via crafted content.
Risk Assessment
This vulnerability may lead to the execution of malicious code or application crashes, posing a significant security threat to systems using these browsers.
Recommendation
It is recommended to update Mozilla Firefox to version 29.0 or later and SeaMonkey to version 2.26 or later to mitigate this vulnerability.
Other vulnerabilities in Mozilla Firefox, SeaMonkey
See all- CVE-2014-8636High
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter. This may allow remote attackers to execute arbitrary JavaScript code with chrome privileges.
- CVE-2014-8635High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 35.0 and SeaMonkey before version 2.32 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- CVE-2014-1525High
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted VIDEO element in an HTML document.
- CVE-2014-1519High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- CVE-2014-1494High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code.
Original NVD description (English source)
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.