NVD

Id
25898  
Name
CVE-2015-4475  
Description
The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-15  
Modified Date
2016-12-23  
Seq
2015-4475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136530 25898 CVE-2015-4475 openSUSE-SU-2015:1389  View
136531 25898 CVE-2015-4475 openSUSE-SU-2015:1390  View
136532 25898 CVE-2015-4475 SUSE-SU-2015:1449  View
136533 25898 CVE-2015-4475 SUSE-SU-2015:1528  View
136534 25898 CVE-2015-4475 SUSE-SU-2015:2081  View
136535 25898 CVE-2015-4475 openSUSE-SU-2015:1453  View
136536 25898 CVE-2015-4475 openSUSE-SU-2015:1454  View
136537 25898 CVE-2015-4475 RHSA-2015:1586  View
136538 25898 CVE-2015-4475 http://www.mozilla.org/security/announce/2015/mfsa2015-80.html  View
136539 25898 CVE-2015-4475 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136540 25898 CVE-2015-4475 76294  View
136541 25898 CVE-2015-4475 1033247  View
136542 25898 CVE-2015-4475 USN-2702-1  View
136543 25898 CVE-2015-4475 USN-2702-2  View
136544 25898 CVE-2015-4475 USN-2702-3  View
136545 25898 CVE-2015-4475 https://bugzilla.mozilla.org/show_bug.cgi?id=1175396  View
136546 25898 CVE-2015-4475 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8843 JVNDB-2015-004163 Mozilla Firefox の mozilla::AudioSink 関数における任意のコードを実行される脆弱性 Mozilla Firefox の mozilla::AudioSink 関数は、MP3 形式の音声データの一貫性のないサンプル形式を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2015-4475 81700 CVE-2015-4475 25898 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004163.html 2015-08-11 2015-08-19 View