Mozilla

Mozilla Foundation Security Advisory 2015-10

Update OpenH264 plugin to version 1.3

Announced
February 5, 2015
Reporter
Mozilla and Cisco Developers, Nils, Hanno Böck
Impact
Critical
Products
Firefox, OpenH264
Fixed in
  • Firefox 34
  • Firefox 35
  • OpenH264 1.3

Description

Mozilla and Cisco developers as well as security researcher Nils reported security and stability bugs affecting the OpenH264 plugin version 1.1. This plugin was available to Desktop Firefox 34 and 35 users as an on-demand download as needed. Security researchers Nils and Hanno Böck also reported issues not present in 1.1 but in the development branch and fixed in 1.3.

These issues have been addressed in the version 1.3 of the OpenH264 plugin, which has been shipped as an update to Desktop Firefox 34 and 35 installations. Details of Firefox reported fixes are below and Cisco will publish additional fix details and assign CVE numbers.

References