Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
{
"binaries": [
{
"binary_version": "30.0+build1-0ubuntu0.14.04.3",
"binary_name": "firefox"
},
{
"binary_version": "30.0+build1-0ubuntu0.14.04.3",
"binary_name": "firefox-dev"
},
{
"binary_version": "30.0+build1-0ubuntu0.14.04.3",
"binary_name": "firefox-globalmenu"
},
{
"binary_version": "30.0+build1-0ubuntu0.14.04.3",
"binary_name": "firefox-mozsymbols"
},
{
"binary_version": "30.0+build1-0ubuntu0.14.04.3",
"binary_name": "firefox-testsuite"
}
],
"availability": "No subscription required"
}