NVD

Id
27898  
Name
CVE-2015-7213  
Description
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-03-29  
Published
2015-12-16  
Modified Date
2017-03-23  
Seq
2015-7213  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146746 27898 CVE-2015-7213 FEDORA-2015-51b1105902  View
146747 27898 CVE-2015-7213 FEDORA-2015-7ab3d3afcf  View
146748 27898 CVE-2015-7213 SUSE-SU-2015:2334  View
146749 27898 CVE-2015-7213 SUSE-SU-2015:2335  View
146750 27898 CVE-2015-7213 SUSE-SU-2015:2336  View
146751 27898 CVE-2015-7213 openSUSE-SU-2015:2380  View
146752 27898 CVE-2015-7213 openSUSE-SU-2015:2406  View
146753 27898 CVE-2015-7213 openSUSE-SU-2015:2353  View
146754 27898 CVE-2015-7213 openSUSE-SU-2016:0307  View
146755 27898 CVE-2015-7213 openSUSE-SU-2016:0308  View
146756 27898 CVE-2015-7213 RHSA-2015:2657  View
146757 27898 CVE-2015-7213 DSA-3422  View
146758 27898 CVE-2015-7213 http://www.mozilla.org/security/announce/2015/mfsa2015-146.html  View
146759 27898 CVE-2015-7213 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
146760 27898 CVE-2015-7213 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
146761 27898 CVE-2015-7213 79279  View
146762 27898 CVE-2015-7213 1034426  View
146763 27898 CVE-2015-7213 USN-2833-1  View
146764 27898 CVE-2015-7213 USN-2859-1  View
146765 27898 CVE-2015-7213 https://bugzilla.mozilla.org/show_bug.cgi?id=1206211  View
146766 27898 CVE-2015-7213 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11092 JVNDB-2015-006412 64-bit プラットフォーム上で稼動する Mozilla Firefox の libstagefright における整数オーバーフローの脆弱性 64-bit プラットフォーム上で稼動する Mozilla Firefox の libstagefright の MPEG4Extractor.cpp の MPEG4Extractor::readMetaData 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2015-7213 84438 CVE-2015-7213 27898 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006412.html 2015-12-15 2015-12-17 View