CVE-2015-4475 in Firefox
Sumário
de MITRE
The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.