CVE-2015-7213 in Mozilla Firefox
Summary
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
09/16/2015
Disclosure
12/16/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 79819 | Mozilla Firefox MP4 Playback readMetaData numeric error | 189 | Not defined | Official fix | CVE-2015-7213 |