Buffer overflow in Mozilla Firefox
CVE-2014-1578
The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.
Vulnerability class: Buffer Overflow
EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox — versions 31.0, 31.1.0, 30.0
- Mozilla Thunderbird — versions 31.0, 31.1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (x_refsource_SECUNIA, third-party-advisory)
- security@mozilla.org (vendor-advisory, x_refsource_SUSE)
- security@mozilla.org (vendor-advisory, x_refsource_SUSE)
- security@mozilla.org (vendor-advisory, x_refsource_SUSE)
- security@mozilla.org (vendor-advisory, x_refsource_FEDORA)
- security@mozilla.org (vdb-entry, x_refsource_SECTRACK)
- security@mozilla.org (vendor-advisory, x_refsource_SUSE)
- security@mozilla.org (x_refsource_UBUNTU, vendor-advisory)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (vendor-advisory, x_refsource_GENTOO)