Fluid Attacks Database

Description

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	firefox	<0:38.2.0-4.el5_11	0:38.2.0-4.el5_11
rpm rhel6	firefox	<0:38.2.0-4.el6_7	0:38.2.0-4.el6_7
rpm rhel7	firefox	<0:38.2.0-4.el7_1	0:38.2.0-4.el7_1

Aliases

1. CVE-2015-44802. NVD-2015-44803. OSV-2015-4480

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.