Vulnerability in Mozilla Firefox

CVE-2015-4496

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox
Oracle Solaris — versions 11.3
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

security@mozilla.org (x_refsource_CONFIRM, Issue Tracking)
security@mozilla.org (x_refsource_CONFIRM, Third Party Advisory)
security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
security@mozilla.org (x_refsource_CONFIRM)