CVEvulnerability
CVE-2014-8643
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-01-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:C/A:N
- Weaknesses
- CWE-264
Description
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.
Affected configurations
• opensuse opensuse 13.1
• opensuse opensuse 13.2
• mozilla firefox (<= 34.0.5)
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/62253 secunia.com
- http://secunia.com/advisories/62446 secunia.com
- http://www.mozilla.org/security/announce/2014/mfsa2015-07.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securityfocus.com/bid/72043 www.securityfocus.com
- http://www.securitytracker.com/id/1031533 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117140 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99962 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/62253 secunia.com
- http://secunia.com/advisories/62446 secunia.com
- http://www.mozilla.org/security/announce/2014/mfsa2015-07.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securityfocus.com/bid/72043 www.securityfocus.com
- http://www.securitytracker.com/id/1031533 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117140 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99962 exchange.xforce.ibmcloud.com