Integer overflow

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...

CVE-2015-4493

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...

CVE-2015-4496

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...

CVE-2015-4480

CVE-2015-4480 : An integer overflow in stagefright::SampleTable::isValid within libstagefright could allow remote code execution via crafted MPEG-4 video data (H.264) in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2. Affected versions require upgrading to Firefox 40 or ESR 38.2+ to...

CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

CVE-2015-4480

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...

CVE-2015-4479

CVE-2015-4479 is a memory/bounds-violation in Mozilla Firefox’s handling of MPEG-4 video (libstagefright), triggered by an saio chunk in MPEG-4 data. The vulnerability allows remote code execution on affected browsers prior to Firefox 40.0 and Firefox ESR 38.x prior to 38.2. Public advisories (in...

CVE-2015-4496

CVE-2015-4496 corresponds to a set of integer overflows in libstagefright that affect Mozilla Firefox’s handling of MPEG-4 MP4 metadata. The vulnerability arises when parsing crafted sample metadata in MP4 video files, enabling remote code execution. Affected product/component: libstagefright in ...

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

CVE-2015-4493

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...

UBUNTU-CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

CVE-2015-4480

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...

CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

An unexpected 0day journey-vulnerability warning-the black bar safety net

Do not know everybody noticed no, after Baidu Cloud Security X-TEAM-authored articles in the technical analysis: on the Android libStagefright series vulnerability analysis, in fact, implies a natural and egg 0day the. This“0day”, the kind we in the construction of the sample of the byproduct...

CVE-2015-3827

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...

Mozilla: Integer overflows in libstagefright while processing MP4 video metadata (MFSA 2015-93)

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...

Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0355)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MPEG-2 TS file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted MPEG-2 TS file...

Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0353)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MPEG-2 TS file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted MPEG-2 TS file...