NetSight
IP …
medium6.8

CVE-2015-7213

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x befor…

Impact

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.

Affected products

VendorProductAffected versions
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
FedoraprojectFedora
Versions 22, 23
MozillaFirefox
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1, 38.2.0

Weakness classification

CWE-189

References