CVE-2015-0825

Published: 25 February 2015

Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.

Priority

Medium

Status

Package Release Status
firefox
Launchpad, Ubuntu, Debian
Upstream
Released (36)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [36.0+build2-0ubuntu0.14.04.4])