PT-2016-1460 · Mozilla+6 · Firefox Esr+7
Jmamj90
·
Publicado
2016-03-08
·
Atualizado
2024-12-12
·
CVE-2016-1957
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 45.0
Firefox ESR versions prior to 38.7
Description
The issue is caused by a buffer overflow in the libstagefright library, which can be exploited by a remote attacker to cause a denial of service (memory consumption) using a specially crafted MPEG-4 file. This file triggers a delete operation on an array, leading to memory leak.
Recommendations
For Mozilla Firefox versions prior to 45.0, update to version 45.0 or later to resolve the issue.
For Firefox ESR versions prior to 38.7, update to version 38.7 or later to resolve the issue.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Firefox Esr
Firefox
Red Hat
Suse
Ubuntu
Libstagefright