Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefox | Jul 6, 2016 | Dec 16, 2015 |
| Debian | — | Upgrade icedoveUpgrade iceweasel | Dec 18, 2015 | Dec 16, 2015 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade firefoxUpgrade libxulUpgrade thunderbirdUpgrade firefox-esrUpgrade seamonkey | Dec 10, 2025 | Dec 15, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Dec 16, 2015 |
| Mfsa2015 146 | — | Upgrade to Mozilla Firefox version 43.0Upgrade to Mozilla Firefox ESR version 38.5Upgrade to the latest version of Mozilla Firefox | Dec 18, 2015 | Dec 16, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 38.5Upgrade to the latest version of Mozilla Thunderbird | Dec 24, 2015 | Dec 16, 2015 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 45.4.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade web/browser/firefox to version 45.4.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3 | May 29, 2017 | Dec 16, 2015 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbird | Oct 16, 2024 | Dec 16, 2015 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaThunderbird-develUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox | Jan 4, 2016 | Dec 16, 2015 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Dec 18, 2015 | Dec 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub