cve/2014/CVE-2014-1542.md

CVE-2014-1542

Description

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.

POC

Reference

• http://www.mozilla.org/security/announce/2014/mfsa2014-53.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=991533

Github

• https://github.com/mattfeng/picoctf-2014-solutions