{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3009?format=json","vulnerability_id":"VCID-amaw-8qgg-uuav","summary":"Security researcher Nils discovered a mechanism to break out\nof the Gecko Media\nPlugin (GMP) sandbox on Windows systems. The GMP sandbox is currently only\nused to host h.264 video playback using the OpenH264 plugin but is being\ndeveloped to host other other media plugins. This bug would allow an attacker to\nescape or bypass the GMP sandbox if another exploitable bug is found in a GMP\nmedia plugin which allowed them to compromise the GMP process.\nThis bugs only affects Windows systems. OS X and Linux systems\nare not affected by it.","aliases":[{"alias":"CVE-2014-8643"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1243?format=json","purl":"pkg:mozilla/Firefox@35.0.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@35.0.0"}],"affected_packages":[],"references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8643","reference_id":"CVE-2014-8643","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8643"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2015-07","reference_id":"mfsa2015-07","reference_type":"","scores":[{"value":"critical","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2015-07"}],"weaknesses":[],"exploits":[],"severity_range_score":"9.0 - 10.0","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-amaw-8qgg-uuav"}