CVE-2014-8643

Published: Jan 14, 2015Modified: May 6, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.

Affected (3)

Products: Opensuse: Opensuse · Mozilla: Firefox

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 34.0.5

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-264

References (20)

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html

Source: security@mozilla.org

http://secunia.com/advisories/62253

Source: security@mozilla.org

http://secunia.com/advisories/62446

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2014/mfsa2015-07.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

http://www.securityfocus.com/bid/72043

Source: security@mozilla.org

http://www.securitytracker.com/id/1031533

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1117140

Source: security@mozilla.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/99962

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html