CVE-2015-4486: Buffer Overflow
The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4486?
CVE-2015-4486 has a critical severity rating due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-4486?
To fix CVE-2015-4486, update Mozilla Firefox or Firefox ESR to version 40.0 or later.
What software is affected by CVE-2015-4486?
CVE-2015-4486 affects Mozilla Firefox versions before 40.0 and Firefox ESR versions before 38.2 on various operating systems.
Can CVE-2015-4486 lead to data exposure?
Yes, CVE-2015-4486 can potentially expose sensitive data through arbitrary code execution.
What causes the vulnerability in CVE-2015-4486?
CVE-2015-4486 is caused by an out-of-bounds read vulnerability within the decrease_ref_count function in libvpx.