CVE-2014-1522

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.

Date published : 2014-04-30

http://www.mozilla.org/security/announce/2014/mfsa2014-36.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html