CVEs-PoC/2015/CVE-2015-4477.md

CVE-2015-4477

Description

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.ubuntu.com/usn/USN-2702-2
• http://www.ubuntu.com/usn/USN-2702-3
• https://bugzilla.mozilla.org/show_bug.cgi?id=1179484

Github

No PoCs found on GitHub currently.