Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3832
HistoryOct 01, 2015 - 12:00 a.m.

CVE-2015-3832

2015-10-0100:00:00
ubuntu.com
ubuntu.com
6

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.954 High

EPSS

Percentile

99.4%

Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in
Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary
code via invalid size values of NAL units in MP4 data, aka internal bug
19641538.

Notes

Author Note
jdstrand as with previous stagefright issues, this issue affects Ubuntu’s android packages, but not in a way that is exposed to apps. See CVE-2015-1538 for details

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.954 High

EPSS

Percentile

99.4%