CVE-2015-4480 — Integer Overflow or Wraparound in Mozilla Firefox

CWE-189CWE-190 — Integer Overflow or WraparoundCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer11 documents6 sources
Severity
9.3CRITICALNVD
OSV10.0
EPSS
2.3%
top 15.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxCanonical Ubuntu LinuxOpensuse
Timeline
PublishedAug 16
Latest updateMay 14

Description

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶Ubuntumozilla/firefox< 40.0+build4-0ubuntu0.14.04.1+1
▶NVDmozilla/firefox39.0.3+4
▶NVDopensuse/opensuse13.1, 13.2+1

Also affects: Ubuntu Linux 12.04, 14.04, 15.04

🔴Vulnerability Details

5
GHSA
GHSA-v7qw-fg65-g54w: Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40↗2022-05-14
▶
OSV
firefox regression↗2015-08-20
▶
OSV
firefox vulnerabilities↗2015-08-11
▶
OSV
CVE-2015-4480: Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40↗2015-08-11
▶
OSV
ubufox update↗2015-08-11
▶

📋Vendor Advisories

4
Ubuntu
Firefox regression↗2015-08-20
▶
Ubuntu
Firefox vulnerabilities↗2015-08-11
▶
Ubuntu
Ubufox update↗2015-08-11
▶
Red Hat
Mozilla: Overflow issues in libstagefright (MFSA 2015-83)↗2015-08-11
▶

💬Community

1
Bugzilla
CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)↗2015-08-11
▶