The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Jul 5, 2015 |
| Freebsd | — | Upgrade firefoxUpgrade firefox-esrUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade libxulUpgrade seamonkeyUpgrade linux-firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Jul 16, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jul 5, 2015 |
| Mfsa2015 62 | — | Upgrade to Mozilla Firefox ESR version 38.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 39.0 | Jul 8, 2015 | Jul 5, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.35.0 | Oct 22, 2015 | Jul 5, 2015 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Jul 5, 2015 |
| Oracle_linux | — | Upgrade firefox | Oct 16, 2024 | Jul 6, 2015 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaThunderbird | Dec 18, 2015 | Jul 5, 2015 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jul 6, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub