The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.
References
Link | Resource |
---|---|
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html | Third Party Advisory |
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html | Mailing List Third Party Advisory |
http://secunia.com/advisories/59866 | Third Party Advisory |
http://www.mozilla.org/security/announce/2014/mfsa2014-39.html | Vendor Advisory |
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html | Third Party Advisory |
http://www.securitytracker.com/id/1030163 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1030164 | Third Party Advisory VDB Entry |
http://www.ubuntu.com/usn/USN-2185-1 | Third Party Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=989210 | Issue Tracking Patch Vendor Advisory |
https://security.gentoo.org/glsa/201504-01 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2014-04-30T10:00:00
Updated: 2016-12-20T16:57:01
Reserved: 2014-01-16T00:00:00
Link: CVE-2014-1525
JSON object: View
NVD Information
Status : Analyzed
Published: 2014-04-30T10:49:04.863
Modified: 2020-08-14T17:47:53.903
Link: CVE-2014-1525
JSON object: View
Redhat Information
No data.