Home

CVE-2015-7222

Description

Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.

Risk Information

Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.351

Associated Vulnerability

VulnerabilityOS Platform
Update for Mozilla Firefox (43.0)Windows
Update for Mozilla Firefox (43.0.1)Windows
Update for Mozilla Firefox (43.0.2)Windows
Update for Mozilla Firefox (43.0.3)Windows
Update for Mozilla Firefox x64 (43.0.3)Windows
Update for Mozilla Firefox (43.0.4)Windows
Update for Mozilla Firefox x64 (43.0.4)Windows
Update for Mozilla Firefox ESR (38.5.0)Windows
Update for Mozilla Firefox ESR (38.5.1)Windows
Update for Mozilla Firefox ESR (38.5.2)Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.1.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.1.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.0.5Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.1.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.2.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.2.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.0.5Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.1.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.2.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.2.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.3.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 38.4.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 42.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.3.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 38.4.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 42.0Windows
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (43.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (43.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (43.0.2)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (43.0.4)Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.1.0Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.1.0Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.0.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.0.5Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.0.5Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.2.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.2.0Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.1.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.2.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.1.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.2.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.3.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.3.0Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.4.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.4.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 42.0Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 38.5Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-302188Update for Mozilla Firefox (43.0)
PATCH-302189Update for Mozilla Firefox (43.0.1)
PATCH-302190Update for Mozilla Firefox (43.0.2)
PATCH-302191Update for Mozilla Firefox (43.0.3)
PATCH-302192Update for Mozilla Firefox x64 (43.0.3)
PATCH-302193Update for Mozilla Firefox (43.0.4)
PATCH-302194Update for Mozilla Firefox x64 (43.0.4)
PATCH-302287Update for Mozilla Firefox ESR (38.5.0)
PATCH-302288Update for Mozilla Firefox ESR (38.5.1)
PATCH-302289Update for Mozilla Firefox ESR (38.5.2)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234