Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2015-93
HistoryAug 12, 2015 - 12:00 a.m.

Integer overflows in libstagefright while processing MP4 video metadata — Mozilla

2015-08-1200:00:00
Mozilla Foundation
www.mozilla.org
23

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.3%

JSON

Security researcher Joshua Drake reported potential integer overflows in the libstagefright library while processing video sample metadata in MPEG4 video files. This can lead to a potentially exploitable crash.

Affected configurations

Vulners
Node
mozillafirefoxRange<38
OR
mozillaseamonkeyRange<2.35
CPENameOperatorVersion
firefoxlt38
seamonkeylt2.35

Related

openvas 4
ubuntucve 2
android 1
cve 2
prion 2
nvd 2
cvelist 2
redhat 1
centos 1
nessus 8
veracode 1
kaspersky 1
freebsd 1
securityvulns 1
mageia 1
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-93) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Mac OS X
2015-05-21 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Windows
2015-05-21 00:00:00
ubuntucve
ubuntucve
CVE-2015-1538
2015-10-01 00:00:00
CVE-2015-4496
2015-08-16 00:00:00
android
android
CVE-2015-1538
2015-08-01 00:00:00
cve
cve
CVE-2015-1538
2015-10-01 00:59:06
CVE-2015-4496
2015-08-16 01:59:22
prion
prion
Integer overflow
2015-08-16 01:59:00
Integer overflow
2015-10-01 00:59:00
nvd
nvd
CVE-2015-4496
2015-08-16 01:59:22
CVE-2015-1538
2015-10-01 00:59:06
cvelist
cvelist
CVE-2015-1538
2015-10-01 00:00:00
CVE-2015-4496
2015-08-16 01:00:00
redhat
redhat
(RHSA-2015:0988) Critical: firefox security update
2015-05-12 00:00:00
centos
centos
firefox security update
2015-05-13 00:01:13
nessus
nessus
CentOS 5 / 6 / 7 : firefox (CESA-2015:0988)
2015-05-13 00:00:00
Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0988)
2015-05-13 00:00:00
RHEL 5 / 6 / 7 : firefox (RHSA-2015:0988)
2015-05-13 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:39:10
kaspersky
kaspersky
KLA10584 Multiple vulnerabilities in Mozilla products
2015-05-12 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-05-12 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey / Firefox OS multiple security vulnerabilities
2015-08-31 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.3%

JSON
Related for MFSA2015-93
openvas4ubuntucve2android1cve2prion2nvd2cvelist2redhat1centos1nessus8veracode1kaspersky1freebsd1securityvulns1mageia1