Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3829
HistoryOct 01, 2015 - 12:00 a.m.

CVE-2015-3829

2015-10-0100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.954

Percentile

99.4%

Off-by-one error in the MPEG4Extractor::parseChunk function in
MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows
remote attackers to execute arbitrary code or cause a denial of service
(integer overflow and memory corruption) via crafted MPEG-4 covr atoms with
a size equal to SIZE_MAX, aka internal bug 20923261.

Notes

Author Note
jdstrand please see CVE-2015-1538 for details until more information is public Ubuntu 14.04 is affected but no supported images use it

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.954

Percentile

99.4%