Fluid Attacks Database

Description

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	firefox	<0:38.0-4.el5_11	0:38.0-4.el5_11
rpm rhel6	firefox	<0:38.0-4.el6_6	0:38.0-4.el6_6
rpm rhel7	firefox	<0:38.0-3.el7_1	0:38.0-3.el7_1

Aliases

1. CVE-2015-44962. NVD-2015-44963. OSV-2015-4496

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.