CVE-2015-4486

Published: 11 August 2015

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4486
• https://www.mozilla.org/en-US/security/advisories/mfsa2015-89/
• https://ubuntu.com/security/notices/USN-2702-1
• NVD
• Launchpad
• Debian