CVE-2015-7222: Buffer Overflow
Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7222?
CVE-2015-7222 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2015-7222?
To fix CVE-2015-7222, update Mozilla Firefox and Firefox ESR to version 43.0 or later, or apply the relevant security patches provided by your operating system vendor.
Which versions of Firefox are affected by CVE-2015-7222?
CVE-2015-7222 affects Mozilla Firefox versions up to 42.0 and Firefox ESR versions up to 38.4.0.
What kind of attacks can CVE-2015-7222 facilitate?
CVE-2015-7222 allows attackers to exploit an integer underflow vulnerability which can lead to arbitrary code execution or application crashes.
Is there a workaround for CVE-2015-7222?
There are no effective workarounds for CVE-2015-7222 other than upgrading to the secure versions of the browsers.