Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

PT-2015-1789

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Firefox ESR versions prior to 38.2 Description The issue is related to an integer overflow in the stagefright::SampleTable::isValid function in libstagefright. This allows remote attackers to execute...

Overflow issues in libstagefright — Mozilla

An anonymous researcher reported, via TippingPoint's Zero Day Initiative, two integer overflows in the libstagefright library that could be triggered by a malicious 'saio' chunk in an MPEG4 video. These overflows allowed for potential arbitrary code execution. This issue was independently reporte...

UBUNTU-CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

PT-2015-1794

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Firefox ESR versions prior to 38.2 Description The issue is related to a heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright. This allows remote attackers to...

PT-2015-1761

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Firefox ESR versions prior to 38.2 Description The issue is related to multiple integer overflows in the libstagefright library, which can be exploited by remote attackers to execute arbitrary code via a...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2015-79 Miscellaneous memory safety hazards rv:40.0 / rv:38.2 MFSA 2015-80 Out-of-bounds read with malformed MP3 file MFSA 2015-81 Use-after-free in MediaStream playback MFSA 2015-82 Redefinition of non-configurable JavaScript object properties MFSA 2015-83...

PT-2015-2221

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to an off-by-one error in the MPEG4Extractor::parseChunk function, which can lead to an integer overflow and memory corruption. This can be exploited by remote attackers...

PT-2015-2222

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to the MPEG4Extractor::parse3GPPMetaData function in the libstagefright library, which does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM...

PT-2015-2224

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to the MPEG4Extractor::parse3GPPMetaData function in the libstagefright library, which does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM...

PT-2015-2225

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to the MPEG4Extractor::parseChunk function in the libstagefright library, which does not properly restrict size addition. This allows remote attackers to execute arbitrary...

PT-2015-2227

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I libstagefright affected versions not specified Description The issue is related to multiple integer underflows in the ESDS::parseESDescriptor function of the libstagefright library in the Android operatin...

PT-2015-2223

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to an integer underflow in the MPEG4Extractor::parseChunk function of the libstagefright library in Android. This can be exploited by a remote attacker using specially...

PT-2015-2228

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to an integer overflow in the SampleTable::setSampleToChunkParams function in libstagefright in Android. This allows remote attackers to execute arbitrary code via crafted...

An unexpected 0day journey-vulnerability warning-the black bar safety net

Do not know everybody noticed no, after Baidu Cloud Security X-TEAM-authored articles in the technical analysis: on the Android libStagefright series vulnerability analysis, in fact, implies a natural and egg 0day the. This“0day”, the kind we in the construction of the sample of the byproduct...

CVE-2015-1539

Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493...

CVE-2015-3832

Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538...

CVE-2015-3827

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...