UBUNTU-CVE-2014-8641
- Source
- https://ubuntu.com/security/CVE-2014-8641
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-8641.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2014-8641
- Upstream
- Downstream
- Related
- Published
- 2015-01-14T00:00:00Z
- Modified
- 2026-02-04T03:51:16.023758Z
- Severity
-
- Ubuntu - medium
- Summary
- [none]
- Details
-
Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.
- References
Affected packages
Ubuntu:14.04:LTS / firefox
Package
- Name
- firefox
- Purl
- pkg:deb/ubuntu/firefox@35.0+build3-0ubuntu0.14.04.2?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed35.0+build3-0ubuntu0.14.04.2
Affected versions
24.*
24.0+build1-0ubuntu1
25.*
25.0+build3-0ubuntu0.13.10.1
28.*
28.0~b2+build1-0ubuntu2
28.0+build1-0ubuntu1
28.0+build2-0ubuntu1
28.0+build2-0ubuntu2
29.*
29.0+build1-0ubuntu0.14.04.2
30.*
30.0+build1-0ubuntu0.14.04.3
31.*
31.0+build1-0ubuntu0.14.04.1
32.*
32.0+build1-0ubuntu0.14.04.1
32.0.3+build1-0ubuntu0.14.04.1
33.*
33.0+build2-0ubuntu0.14.04.1
34.*
34.0+build2-0ubuntu0.14.04.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "35.0+build3-0ubuntu0.14.04.2",
"binary_name": "firefox"
},
{
"binary_version": "35.0+build3-0ubuntu0.14.04.2",
"binary_name": "firefox-dev"
},
{
"binary_version": "35.0+build3-0ubuntu0.14.04.2",
"binary_name": "firefox-globalmenu"
},
{
"binary_version": "35.0+build3-0ubuntu0.14.04.2",
"binary_name": "firefox-mozsymbols"
},
{
"binary_version": "35.0+build3-0ubuntu0.14.04.2",
"binary_name": "firefox-testsuite"
}
]
}