MP3 Backend of Firefox and Thunderbird Found Vulnerable

Posted by samzenpus on Wednesday April 1, 2015 @08:01PM from the protect-ya-neck dept.

jones_supa writes A critical vulnerability has been found in the MPEG-1 Layer III playback backend of Mozilla Firefox and Thunderbird. Security researcher Aki Helin reported a use-after-free scenario when playing certain audio files on the web using the Fluendo MP3 plugin for GStreamer on Linux. This is due to a flaw in handling certain MP3 files by the plugin and its interaction with Mozilla code. A maliciously crafted MP3 file can lead to a potentially exploitable crash. Linux is the only affected platform, so Windows and OS X users are safe from this particular vulnerability.

Slashdot Mirror

MP3 Backend of Firefox and Thunderbird Found Vulnerable

1 of 60 comments (clear)