CVE-2015-4506

Buffer overflow in the vp9initcontextbuffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file...

libvpx -- buffer overflow in vp9_init_context_buffers

The Mozilla Project reports: Security researcher Khalil Zhani reported that a maliciously crafted vp9 format video could be used to trigger a buffer overflow while parsing the file. This leads to a potentially exploitable crash due to a flaw in the libvpx library...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2015-96 Miscellaneous memory safety hazards rv:41.0 / rv:38.3 MFSA 2015-97 Memory leak in mozTCPSocket to servers MFSA 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes MFSA 2015-99 Site attribute spoofing on Android by pasting URL with...

Buffer overflow in libvpx while parsing vp9 format video — Mozilla

Security researcher Khalil Zhani reported that a maliciously crafted vp9 format video could be used to trigger a buffer overflow while parsing the file. This leads to a potentially exploitable crash due to a flaw in the libvpx library...

UBUNTU-CVE-2015-4506

Buffer overflow in the vp9initcontextbuffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file...

Fedora 23 : libvpx-1.4.0-5.fc23 (2015-15934)

libvpx-1.3.0-7.fc21 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.3.0-7.fc22 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.4.0-5.fc23 - set --size-limit=16384x16384 to avoid CVE-2015-1258 Note that Tenable Network Security has extracted the preceding description bloc...

[SECURITY] Fedora 23 Update: libvpx-1.4.0-5.fc23

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code or trigger service denial-of-service attacks

The vulnerability of the decreaserefcount function in the libvpx library in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

Mozilla Firefox WebM Video Processing Buffer Overflow Vulnerability (CNVD-2015-05432)

Mozilla Firefox is an open source WEB browser. Mozilla Firefox handles WebM video with a Libvpx stock in buffer overflow vulnerability that allows remote attackers to construct malicious WEB pages and trick users into parsing them, which can crash the application or execute arbitrary code...

Mozilla Firefox WebM Video Processing Buffer Overflow Vulnerability (CNVD-2015-05433)

Mozilla Firefox is an open source WEB browser. Mozilla Firefox handles WebM video with a Libvpx stock in buffer overflow vulnerability that allows remote attackers to construct malicious WEB pages and trick users into parsing them, which can crash the application or execute arbitrary code...

DEBIAN-CVE-2015-4486

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via malformed WebM video data...

CVE-2015-4486

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via malformed WebM video data...

CVE-2015-4485

Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data...

DEBIAN-CVE-2015-4485

Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data...

CVE-2015-4485

Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data...

Out-of-bounds

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via malformed WebM video data...

Heap overflow

Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data...

CVE-2015-4486

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via malformed WebM video data...

CVE-2015-4486

CVE-2015-4486 affects Mozilla Firefox and Firefox ESR via a libvpx-based issue in WebM decoding (decrease_ref_count). The vulnerability can allow remote code execution or a denial of service through malformed WebM data, with the described impact of an out-of-bounds read. Affected products are Fir...

CVE-2015-4485

Summary: CVE-2015-4485 is a heap-based buffer overflow in the libvpx decode path used by Mozilla Firefox when handling WebM video data. The flaw occurs in resize_context_buffers and can enable remote code execution. Affected products/versions: Mozilla Firefox before 40.0 and Firefox ESR 38.x befo...