CVE-2014-1522

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.42% chance of exploitation in the next 30 days, 92th percentile

Published

2014-04-30

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://bugzilla.mozilla.org/show_bug.cgi?id=995289

References

• CVE Record
• NVD entry

Related

• CVE-2014-1520
• CVE-2014-1564
• CVE-2014-1513
• CVE-2014-1597
• CVE-2014-1512
• CVE-2014-1603