Lucene search

K

MozillaCVELIST:CVE-2015-0825

HistoryFeb 25, 2015 - 11:00 a.m.

CVE-2015-0825

2015-02-2511:00:00

mozilla

www.cve.org

7

AI Score

9.1

Confidence

High

EPSS

0.004

Percentile

74.3%

Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.

References

lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html

lists.opensuse.org/opensuse-updates/2015-03/msg00067.html

www.mozilla.org/security/announce/2015/mfsa2015-21.html

www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

www.securityfocus.com/bid/72751

www.securitytracker.com/id/1031791

www.ubuntu.com/usn/USN-2505-1

bugzilla.mozilla.org/show_bug.cgi?id=1092370

security.gentoo.org/glsa/201504-01

AI Score

9.1

Confidence

High

EPSS

0.004

Percentile

74.3%

Related for CVELIST:CVE-2015-0825

nvd1 openvas8 mozilla1 cve1 prion1 ubuntucve1 archlinux1 ubuntu2 mageia1 nessus10 suse1 freebsd1 kaspersky1 securityvulns1 gentoo1