CVE-2015-4506: Buffer Overflow
Published Sep 24, 2015
·Updated
Buffer overflow in the vp9initcontextbuffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file.
Affected Software
15 affected components
Mozilla Firefox<=40.0.3
Mozilla Firefox=38.0
Mozilla Firefox=38.0.1
Mozilla Firefox=38.0.5
Mozilla Firefox=38.1.0
Mozilla Firefox=38.1.1
Mozilla Firefox=38.2.0
Mozilla Firefox=38.2.1
Mozilla Firefox ESR=38.0
Mozilla Firefox ESR=38.0.1
Mozilla Firefox ESR=38.0.5
Mozilla Firefox ESR=38.1.0
Mozilla Firefox ESR=38.1.1
Mozilla Firefox ESR=38.2.0
Mozilla Firefox ESR=38.2.1
Event History
Sep 24, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4506?
CVE-2015-4506 has a high severity rating due to its potential to enable remote attackers to execute arbitrary code.
2
How do I fix CVE-2015-4506?
To fix CVE-2015-4506, update Mozilla Firefox or Firefox ESR to version 41.0 or later.
3
Which versions of Firefox are affected by CVE-2015-4506?
CVE-2015-4506 affects Mozilla Firefox versions prior to 41.0 and Firefox ESR versions prior to 38.3.
4
Can CVE-2015-4506 be exploited through browsers?
Yes, CVE-2015-4506 can be exploited by opening a crafted VP9 file in the affected versions of Mozilla Firefox.
5
What are the potential impacts of CVE-2015-4506?
The potential impacts of CVE-2015-4506 include unauthorized execution of code and compromise of the user's system.