{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Out-of-bounds read in Web Audio audio timeline (MFSA 2014-70)",
    "tracking": {
      "current_release_date": "2026-08-11T13:57:07+00:00",
      "generator": {
        "date": "2026-08-11T13:57:07+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-1565",
      "initial_release_date": "2014-09-03T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T13:57:07+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 5.11",
            "product": {
              "name": "Red Hat Enterprise Linux 5.11",
              "product_id": "rhel-5.11.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-debuginfo",
            "product": {
              "name": "firefox-debuginfo",
              "product_id": "firefox-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-6-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-1565",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2014-09-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "rhel-5.11.z.els:firefox.src",
          "rhel-5.11.z.els:thunderbird.src",
          "rhel-6-els.els:firefox",
          "rhel-6-els.els:firefox.src",
          "rhel-6-els.els:thunderbird",
          "rhel-6-els.els:thunderbird.src",
          "rhel-7-els.els:firefox",
          "rhel-7-els.els:firefox-debuginfo",
          "rhel-7-els.els:firefox.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1565"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1565"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1565"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore": 4.3
          },
          "products": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src"
          ]
        }
      ],
      "title": "Out-of-bounds read in Web Audio audio timeline (MFSA 2014-70)"
    }
  ]
}