Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbird | Jul 6, 2016 | Dec 16, 2015 |
| Debian | — | Upgrade iceweaselUpgrade icedove | Dec 18, 2015 | Dec 16, 2015 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade firefox-esrUpgrade firefoxUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-thunderbird | Dec 10, 2025 | Dec 15, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Dec 16, 2015 |
| Mfsa2015 145 | — | Upgrade to Mozilla Firefox ESR version 38.5Upgrade to Mozilla Firefox version 43.0Upgrade to the latest version of Mozilla Firefox | Dec 18, 2015 | Dec 16, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 38.5Upgrade to the latest version of Mozilla Thunderbird | Dec 24, 2015 | Dec 16, 2015 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 45.4.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3Upgrade mail/thunderbird to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 45.4.0-0.175.3.14.0.4.0 on Solaris 11.3 | May 29, 2017 | Dec 16, 2015 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbird | Oct 16, 2024 | Dec 16, 2015 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-develUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-common | Jan 4, 2016 | Dec 16, 2015 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Dec 18, 2015 | Dec 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub