CVE-2015-4477

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0

Description The issue is related to a use-after-free vulnerability in the MediaStream playback feature. This vulnerability allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 40.0, update to version 40.0 or later to resolve the issue. As a temporary workaround, consider disabling the MediaStream playback feature until a patch is available. Restrict access to the Web Audio API to minimize the risk of exploitation. Avoid using the Web Audio API in affected versions until the issue is resolved.