CVE-2014-8643
UnknownEPSS 1.54%
Last modified
CVE-2014-8643 is a vulnerability of currently unknown severity. Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.. EPSS estimates a 1.54% chance of exploitation in the next 30 days.
Description
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Opensuse | Opensuse | 13.1 |
| Opensuse | Opensuse | 13.2 |
| Mozilla | Firefox | <= 34.0.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-8643?
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.
How severe is CVE-2014-8643?
Severity scoring for CVE-2014-8643 is pending analysis. The EPSS model estimates a 1.54% probability of exploitation in the next 30 days.
How do I fix CVE-2014-8643?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-8637Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not…
- CVE-2014-8638The navigator.sendBeacon implementation in Mozilla Firefox b…
- CVE-2014-8639Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, T…
- CVE-2014-8640The mozilla::dom::AudioParamTimeline::AudioNodeInputValue fu…
- CVE-2014-8641Use-after-free vulnerability in the WebRTC implementation in…
- CVE-2014-8642Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not…
- CVE-2014-8645Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-8646Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-8647Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-8648Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-8649Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-8650python-requests-Kerberos through 0.5 does not handle mutual …9.8
Are you affected by CVE-2014-8643?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST