PT-2015-4894 · Mozilla+3 · Firefox+3

Atte Kettunen

·

Publicado

2015-02-24

·

Atualizado

2024-12-12

·

CVE-2015-0825

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0
Description A stack-based buffer underflow issue exists in the mozilla::MP3FrameParser::ParseBuffer function, allowing remote attackers to obtain sensitive information from process memory. This occurs when a malformed MP3 file is played, causing improper interaction with memory allocation during playback.
Recommendations For versions prior to 36.0, update to version 36.0 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-1275
ALT-PU-2015-1464
CVE-2015-0825
MGASA-2015-0126
OPENSUSE-SU-2015_0404-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
USN-2505-1
USN-2505-2

Produtos afetados

Alt Linux
Firefox
Suse
Ubuntu