NVD

Id
27907  
Name
CVE-2015-7222  
Description
Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-12-16  
Modified Date
2016-12-07  
Seq
2015-7222  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146870 27907 CVE-2015-7222 FEDORA-2015-51b1105902  View
146871 27907 CVE-2015-7222 FEDORA-2015-7ab3d3afcf  View
146872 27907 CVE-2015-7222 SUSE-SU-2015:2334  View
146873 27907 CVE-2015-7222 SUSE-SU-2015:2335  View
146874 27907 CVE-2015-7222 SUSE-SU-2015:2336  View
146875 27907 CVE-2015-7222 openSUSE-SU-2015:2380  View
146876 27907 CVE-2015-7222 openSUSE-SU-2015:2406  View
146877 27907 CVE-2015-7222 openSUSE-SU-2015:2353  View
146878 27907 CVE-2015-7222 openSUSE-SU-2016:0307  View
146879 27907 CVE-2015-7222 openSUSE-SU-2016:0308  View
146880 27907 CVE-2015-7222 RHSA-2015:2657  View
146881 27907 CVE-2015-7222 DSA-3422  View
146882 27907 CVE-2015-7222 http://www.mozilla.org/security/announce/2015/mfsa2015-147.html  View
146883 27907 CVE-2015-7222 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
146884 27907 CVE-2015-7222 79279  View
146885 27907 CVE-2015-7222 1034426  View
146886 27907 CVE-2015-7222 USN-2833-1  View
146887 27907 CVE-2015-7222 https://bugzilla.mozilla.org/show_bug.cgi?id=1216748  View
146888 27907 CVE-2015-7222 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11101 JVNDB-2015-006421 Mozilla Firefox の libstagefright の MetaData.cpp の Metadata::setData 関数における整数アンダーフローの脆弱性 Mozilla Firefox の libstagefright の MetaData.cpp の Metadata::setData 関数には、整数アンダーフローの脆弱性が存在します。 CVE-2015-7222 84447 CVE-2015-7222 27907 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006421.html 2015-12-15 2015-12-17 View