| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 34.0.5 | |
| seamonkey | ≤ 2.31 |
The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free