CVE-2015-7213
Beschrijving NL
Integer overflow in de MPEG4Extractor::readMetaData-functie in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox vóór 43.0 en Firefox ESR 38.x vóór 38.5 op 64-bits platforms stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd MP4-videobestand dat een bufferoverloop veroorzaakt.
Origineel (Engels) tonen
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
Vendors
Affected products
References
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- rhn.redhat.com
- www.debian.org
- www.debian.org
- www.mozilla.org
- www.oracle.com
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- www.ubuntu.com
- www.ubuntu.com