CVE-2015-4475: Buffer Overflow
The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4475?
CVE-2015-4475 has a critical severity level due to the potential for remote code execution.
How do I fix CVE-2015-4475?
To fix CVE-2015-4475, users should upgrade to Firefox version 40.0 or later, or Firefox ESR version 38.2 or later.
What types of software are affected by CVE-2015-4475?
CVE-2015-4475 affects Mozilla Firefox versions prior to 40.0 and Firefox ESR versions prior to 38.2.
Can CVE-2015-4475 cause a denial of service?
Yes, CVE-2015-4475 can lead to a denial of service through an out-of-bounds read vulnerability.
Is CVE-2015-4475 specific to certain operating systems?
CVE-2015-4475 can affect multiple operating systems that run the vulnerable versions of Mozilla Firefox, including various versions of Ubuntu and openSUSE.