Lucene search
Mozilla FoundationMFSA2015-21HistoryFeb 24, 2015 - 12:00 a.m.
Buffer underflow during MP3 playback — Mozilla
2015-02-2400:00:00
Mozilla Foundation
www.mozilla.org
23
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
74.2%
Security researcher Atte Kettunen used the Address Sanitizer tool to discover a buffer underflow during audio playback of a badly formatted MP3 audio files. Through memory allocation manipulation it may be possible to incorporate parts of Firefox memory into an MP3 stream accessible to scripts on the page.
Affected configurations
Node
mozillafirefoxRange<36
ORmozillafirefox_osRange<2.2
ORmozillaseamonkeyRange<2.33
Related
nvd
nvd
CVE-2015-0825
2015-02-25 11:59:06
prion
prion
Stack overflow
2015-02-25 11:59:00
cve
cve
CVE-2015-0825
2015-02-25 11:59:06
cvelist
cvelist
CVE-2015-0825
2015-02-25 11:00:00
ubuntucve
ubuntucve
CVE-2015-0825
2015-02-25 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-21) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-2505-2)
2015-03-10 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Mar 2015) - Mac OS X
2015-03-03 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-02-25 00:00:00
ubuntu
ubuntu
Firefox regression
2015-03-09 00:00:00
Firefox vulnerabilities
2015-02-25 00:00:00
nessus
nessus
Mozilla Firefox ESR < 31.5 Multiple Vulnerabilities
2019-11-06 00:00:00
Mozilla Firefox < 36.0 Multiple Vulnerabilities
2015-03-17 00:00:00
Ubuntu 14.04 LTS : Firefox regression (USN-2505-2)
2015-03-10 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-04-03 16:11:23
kaspersky
kaspersky
KLA10464 Multiple vulnerabilities in Mozilla products
2015-02-24 00:00:00
suse
suse
Security update for MozillaFirefox, mozilla-nss (important)
2015-03-01 11:04:54
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-02-24 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-03-22 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
74.2%
Related for MFSA2015-21