NetSight
IP …
critical10.0

CVE-2015-4486

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or …

Impact

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
OpensuseOpensuse
Versions 13.1, 13.2
MozillaFirefox
through 39.0.3
Versions 38.0, 38.0.1, 38.0.5, 38.1.0
OracleSolaris
Version 11.3

Weakness classification

CWE-119

References