CVE-2015-2717

Published: 13 May 2015

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.

Status

References

• https://www.mozilla.org/en-US/security/advisories/mfsa2015-55/
• https://ubuntu.com/security/notices/USN-2602-1
• https://www.cve.org/CVERecord?id=CVE-2015-2717
• NVD
• Launchpad
• Debian