Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2014-8640

The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.

  • Published: Jan 14, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-8640
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
mozilla / firefox - 34.0.5.x
opensuse / opensuse 13.1 13.1.x
opensuse / opensuse 13.2 13.2.x
mozilla / seamonkey - 2.31.x