CVE:CVE-2014-1542
CNNVD:CNNVD-201406-256
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 29.0.1及之前的版本的Web Audio子系统中的Speex resampler存在缓冲区溢出漏洞。远程攻击者可借助特制的AudioBuffer通道数和采样率利用该漏洞执行任意代码。
solution:Upgrade opensuse opensuse to a higher version than 13.1,and avoid the version 13.1; Upgrade opensuse_project opensuse to a higher version than 12.3,and avoid the version 12.3; Upgrade mozilla firefox to a higher version than 29.0.1,and avoid the version (,29.0.1]; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3