NVD

Id
25916  
Name
CVE-2015-4493  
Description
Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-15  
Modified Date
2016-12-23  
Seq
2015-4493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136816 25916 CVE-2015-4493 openSUSE-SU-2015:1389  View
136817 25916 CVE-2015-4493 openSUSE-SU-2015:1390  View
136818 25916 CVE-2015-4493 openSUSE-SU-2015:1453  View
136819 25916 CVE-2015-4493 openSUSE-SU-2015:1454  View
136820 25916 CVE-2015-4493 RHSA-2015:1586  View
136821 25916 CVE-2015-4493 DSA-3333  View
136822 25916 CVE-2015-4493 http://www.mozilla.org/security/announce/2015/mfsa2015-83.html  View
136823 25916 CVE-2015-4493 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136824 25916 CVE-2015-4493 1033247  View
136825 25916 CVE-2015-4493 USN-2702-1  View
136826 25916 CVE-2015-4493 USN-2702-2  View
136827 25916 CVE-2015-4493 USN-2702-3  View
136828 25916 CVE-2015-4493 https://bugzilla.mozilla.org/show_bug.cgi?id=1186718  View
136829 25916 CVE-2015-4493 https://hg.mozilla.org/mozilla-central/rev/a674c7019cb5  View
136830 25916 CVE-2015-4493 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8860 JVNDB-2015-004180 Mozilla Firefox の libstagefright の stagefright::ESDS::parseESDescriptor 関数におけるヒープベースのバッファオーバーフローの脆弱性 Mozilla Firefox の libstagefright の stagefright::ESDS::parseESDescriptor 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-4493 81718 CVE-2015-4493 25916 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004180.html 2015-08-11 2015-10-06 View