CVE-2015-1538

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related...

Technical analysis: on the Android libStagefright series vulnerability analysis-vulnerability warning-the black bar safety net

The article corresponds to the CVE-2 0 1 5-1538,1539,3824,3826,3827,3828,38297 a CVE, the specific mapping relationship is currently unknown. The security vulnerability known as the impact of the“9 5%”Android phone security. To follow through on the vulnerability of the attack surface of view, th...

Android Stagefright contains multiple vulnerabilities

Overview Stagefright is the media playback service for Android, introduced in Android 2.2 Froyo. Stagefright in versions of Android prior to 5.1.1r9 may contain multiple vulnerabilities, including several integer overflows, which may allow a remote attacker to execute code on the device...

Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Integer overflow

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

CVE-2015-2717

CVE-2015-2717 describes an integer overflow in the libstagefright component of Mozilla Firefox before 38.0, exploitable via MP4 metadata to cause a heap-based buffer overflow or out-of-bounds read, potentially enabling remote code execution or a denial of service. Affected software is Firefox (an...

Mozilla Firefox MP4 File Parsing Out-of-Bounds Read Vulnerability

Mozilla Firefox is a popular open source WEB browser. Mozilla Firefox parses special metadata in MP4 files with libstagefright stock in out-of-bounds read error, which allows remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them, which can...

CVE-2015-2717: Undefined Security Weakness

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

Firefox < 38.0 Multiple Vulnerabilities (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is prior to 38.0. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist within the browser engine. A remote attacker can exploit these to corrupt memory and execute arbitrary code...

FreeBSD : mozilla -- multiple vulnerabilities (d9b43004-f5fd-4807-b1d7-dbf66455b244)

The Mozilla Project reports : MFSA-2015-46 Miscellaneous memory safety hazards rv:38.0 / rv:31.7 MFSA-2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer MFSA-2015-48 Buffer overflow with SVG content and CSS MFSA-2015-49 Referrer policy ignored when links opened by middle-click and...

UBUNTU-CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

Firefox < 38.0 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 38.0. It is, therefore, affected by the following vulnerabilities : - A privilege escalation vulnerability exists in the Inter-process Communications IPC implementation due to a failure to validate the identity of a listener...

Mozilla: Integer overflows in libstagefright while processing MP4 video metadata (MFSA 2015-93)

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...

PT-2015-5854

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 38.0 Description The issue is related to an integer overflow in libstagefright, which allows remote attackers to execute arbitrary code or cause a denial of service. This can be achieved through an MP4 video...

PT-2015-1795

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 38.0 Description The issue is related to multiple integer overflows in the libstagefright library, which can be exploited by remote attackers to execute arbitrary code. This can be achieved through crafted...

Buffer overflow and out-of-bounds read while parsing MP4 video metadata — Mozilla

Security researcher laf.intel reported a buffer overflow and out-of-bounds read in the libstagefright library while parsing invalid metadata in MPEG4 video files. This can lead to a potentially exploitable crash...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA-2015-46 Miscellaneous memory safety hazards rv:38.0 / rv:31.7 MFSA-2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer MFSA-2015-48 Buffer overflow with SVG content and CSS MFSA-2015-49 Referrer policy ignored when links opened by middle-click and...

openSUSE Security Update : seamonkey (openSUSE-2015-250)

SeaMonkey was updated to 2.33 bnc917597 - MFSA 2015-11/CVE-2015-0835/CVE-2015-0836 Miscellaneous memory safety hazards - MFSA 2015-12/CVE-2015-0833 bmo945192 Invoking Mozilla updater will load locally stored DLL files Windows only - MFSA 2015-13/CVE-2015-0832 bmo1065909 Appended period to hostnam...