CVEs-PoC/2014/CVE-2014-1550.md

CVE-2014-1550

Description

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1020411
• https://bugzilla.mozilla.org/show_bug.cgi?id=1020411

Github

No PoCs found on GitHub currently.