NetSight
IP …
critical10.0

CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code v…

Impact

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.

Affected products

VendorProductAffected versions
MozillaFirefox
through 39.0.3
Versions 38.0, 38.0.1, 38.0.5, 38.1.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-189

References