CVE-2015-4485

N/A

Description

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.

CVE Details

CVSS v3.1 ScoreN/A

Published8/16/2015

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

canonical:ubuntu_linuxmozilla:firefoxopensuse:opensuseoracle:solaris

Weaknesses (CWE)

CWE-119

References

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2015-1586.html(security@mozilla.org)

http://www.mozilla.org/security/announce/2015/mfsa2015-89.html(security@mozilla.org)

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(security@mozilla.org)

http://www.securitytracker.com/id/1033247(security@mozilla.org)

http://www.ubuntu.com/usn/USN-2702-1(security@mozilla.org)

http://www.ubuntu.com/usn/USN-2702-2(security@mozilla.org)

http://www.ubuntu.com/usn/USN-2702-3(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1177948(security@mozilla.org)

https://security.gentoo.org/glsa/201605-06(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2015-1586.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.mozilla.org/security/announce/2015/mfsa2015-89.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1033247(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2702-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2702-2(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2702-3(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=1177948(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/201605-06(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.