CVE-2015-4496
Fixed in a distro release EPSS 4%
Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.
Products: oracle solaris, mozilla firefox
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | firefox | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.0-3.el7_1 |
| Ubuntu 14.04 LTS | firefox | 40.0+build4-0ubuntu0.14.04.4 |