CVE-2014-8640: Race Condition
The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8640?
CVE-2014-8640 has a medium severity rating as it can lead to a denial of service attack.
How do I fix CVE-2014-8640?
To fix CVE-2014-8640, update Mozilla Firefox to version 35.0 or later and SeaMonkey to version 2.32 or later.
Which versions of Mozilla Firefox are affected by CVE-2014-8640?
CVE-2014-8640 affects Mozilla Firefox versions prior to 35.0.
Which versions of SeaMonkey are affected by CVE-2014-8640?
CVE-2014-8640 affects SeaMonkey versions prior to 2.32.
What is the impact of CVE-2014-8640?
The impact of CVE-2014-8640 is that it allows remote attackers to cause a denial of service by triggering uninitialized memory read issues.