CVE

Id
78088  
CVE No.
CVE-2015-0825  
Status
Candidate  
Description
Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714395 78088 CVE-2015-0825 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-21.html  View
714396 78088 CVE-2015-0825 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1092370  View
714397 78088 CVE-2015-0825 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714398 78088 CVE-2015-0825 GENTOO:GLSA-201504-01  View
714399 78088 CVE-2015-0825 URL:https://security.gentoo.org/glsa/201504-01  View
714400 78088 CVE-2015-0825 SUSE:openSUSE-SU-2015:0404  View
714401 78088 CVE-2015-0825 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html  View
714402 78088 CVE-2015-0825 SUSE:openSUSE-SU-2015:0570  View
714403 78088 CVE-2015-0825 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html  View
714404 78088 CVE-2015-0825 UBUNTU:USN-2505-1  View
714405 78088 CVE-2015-0825 URL:http://www.ubuntu.com/usn/USN-2505-1  View
714406 78088 CVE-2015-0825 BID:72751  View
714407 78088 CVE-2015-0825 URL:http://www.securityfocus.com/bid/72751  View
714408 78088 CVE-2015-0825 SECTRACK:1031791  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5512 JVNDB-2015-000018 C-BOARD Moyuku における任意のファイルを作成される脆弱性 C-BOARD Moyuku は、電子掲示板ソフトウェアです。C-BOARD Moyuku には、任意のファイルを作成される脆弱性が存在します。 CVE-2015-0877 78088 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000018.html  View