Lucene search

K
cveMozillaCVE-2015-4496
HistoryAug 16, 2015 - 1:59 a.m.

CVE-2015-4496

2015-08-1601:59:22
CWE-189
mozilla
web.nvd.nist.gov
52
cve-2015-4496
integer overflow
libstagefright
mozilla firefox
remote code execution
mpeg-4
video file
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.9

Confidence

High

EPSS

0.952

Percentile

99.4%

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.

Affected configurations

Nvd
Node
oraclesolarisMatch11.3
Node
mozillafirefoxRange≀37.0.2
VendorProductVersionCPE
oraclesolaris11.3cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.9

Confidence

High

EPSS

0.952

Percentile

99.4%