Mozilla Firefox and Firefox ESR 'nestegg_track_codec_data' heap buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in Mozilla Firefox 'nesteggtrackcodecdata', which allows remote attackers to exploit specially crafted headers in WebM videos to crash an application or execute arbitrary code...

PT-2015-2173

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3 Description The issue is caused by a heap-based buffer overflow in the nestegg track codec data function. This can be exploited by a remote attacker using a specially...