{"schemaVersion":3,"id":"CVE-2014-1542","aliases":["UBUNTU-CVE-2014-1542"],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.","dates":{"published":"2014-06-11T10:00:00.000Z","modified":"2024-08-06T09:42:36.270Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05298,"percentile":0.92507,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.05298},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05298,"percentile":0.92507}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05298,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05298,"percentile":0.92507}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"ubuntu","product":"firefox","name":"firefox","label":"firefox","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/firefox","purlType":"deb","versions":[{"text":"< 30.0+build1-0ubuntu0.14.04.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 30.0+build1-0ubuntu0.14.04.3","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 29.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 29.0.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"opensuse_project","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.3","eol":null,"hubHref":"/vendor/opensuse_project/opensuse"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"13.1","eol":{"isEol":true,"eolDate":"2016-02-03T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"13.1","label":"13.1","eolFrom":"2016-02-03T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"oracle","product":"solaris","name":"Solaris","label":"solaris","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.3","eol":{"isEol":true,"eolDate":"2021-01-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11.3","label":"11.3","eolFrom":"2021-01-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":null},"product":{"name":"oracle-solaris","label":"Oracle Solaris","category":"os"}},"hubHref":"/vendor/oracle/solaris"}],"affectedCount":5,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html","label":"lists.opensuse.org/opensuse-updates/2014-06/msg00040.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/59387","label":"secunia.com/advisories/59387","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Permissions Required"]},{"url":"http://www.securitytracker.com/id/1030388","label":"www.securitytracker.com/id/1030388","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59052","label":"secunia.com/advisories/59052","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Permissions Required"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html","label":"lists.opensuse.org/opensuse-updates/2014-07/msg00001.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=991533","label":"bugzilla.mozilla.org/show_bug.cgi?id=991533","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201504-01","label":"security.gentoo.org/glsa/201504-01","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/59866","label":"secunia.com/advisories/59866","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","label":"www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-53.html","label":"www.mozilla.org/security/announce/2014/mfsa2014-53.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory","REPORT"]},{"url":"http://www.securityfocus.com/bid/67968","label":"www.securityfocus.com/bid/67968","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2243-1","label":"www.ubuntu.com/usn/USN-2243-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/59171","label":"secunia.com/advisories/59171","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Permissions Required"]},{"url":"http://secunia.com/advisories/59486","label":"secunia.com/advisories/59486","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://ubuntu.com/security/CVE-2014-1542","label":"ubuntu.com/security/CVE-2014-1542","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1542","label":"www.cve.org/CVERecord?id=CVE-2014-1542","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-2243-1","label":"ubuntu.com/security/notices/USN-2243-1","hostname":"ubuntu.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2014-0419","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:14572-1","USN-2243-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:14572-1","USN-2243-1"]},"timeline":[{"kind":"published","date":"2014-06-11T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T09:42:36.270Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T14:18:40.455Z","stale":false,"partial":false}}