CVE-2014-8643: Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandb...

Security readout for executives and security teams

This is an old Firefox for Windows issue where a media plugin process could bypass Mozilla's GMP sandbox. The business concern is mainly legacy exposure: modern Firefox versions are outside the described affected range, but unmanaged Windows endpoints running Firefox before 35.0 should be treated as exposed. Likely exposure is limited to Windows systems running Firefox before 35.0. The bundle does not identify other affected products beyond references to Firefox, GMP, and OpenH264. Organizations with legacy images, unmanaged desktops, or archived application stacks should verify browser versions. Treat this as a legacy-risk cleanup item unless affected Firefox versions are still present. If legacy Windows browsers remain in production, prioritize remediation because sandbox bypasses reduce containment against browser compromise. Mitigation focus: Upgrade Firefox on Windows to version 35.0 or later.; Retire or isolate endpoints that cannot run supported Firefox versions.; Check Mozilla and OS vendor advisories for any environment-specific guidance..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.