Total vulnerabilities in the database
Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox_esr | 38.0 | 38.0.x |
| mozilla / firefox_esr | 38.2.1 | 38.2.1.x |
| mozilla / firefox_esr | 38.1.0 | 38.1.0.x |
| mozilla / firefox_esr | 38.2.0 | 38.2.0.x |
| mozilla / firefox_esr | 38.4.0 | 38.4.0.x |
| mozilla / firefox_esr | 38.3.0 | 38.3.0.x |
| mozilla / firefox_esr | 38.0.5 | 38.0.5.x |
| mozilla / firefox_esr | 38.0.1 | 38.0.1.x |
| mozilla / firefox_esr | 38.1.1 | 38.1.1.x |
| opensuse / leap | 42.1 | 42.1.x |
| opensuse / opensuse | 13.1 | 13.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| fedoraproject / fedora | 22 | 22.x |
| fedoraproject / fedora | 23 | 23.x |
| mozilla / firefox | - | 42.0.x |