CVE-2016-1957: Buffer Overflow
Published Mar 13, 2016
·Updated
Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
Affected Software
35 affected components
Novell Suse Package Hub For Suse Linux Enterprise=12
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Mozilla Firefox<=44.0.2
Mozilla Firefox=38.0
Mozilla Firefox=38.0.1
Mozilla Firefox=38.0.5
Mozilla Firefox=38.1.0
Mozilla Firefox=38.1.1
Mozilla Firefox=38.2.0
Mozilla Firefox=38.2.1
Mozilla Firefox=38.3.0
Mozilla Firefox=38.4.0
Mozilla Firefox=38.5.0
Mozilla Firefox=38.5.1
Mozilla Firefox=38.6.0
Mozilla Firefox=38.6.1
Mozilla Thunderbird<=38.6.0
Oracle Linux=5.0
Oracle Linux=6
Oracle Linux=7
Mozilla Firefox ESR=38.0
Mozilla Firefox ESR=38.0.1
Mozilla Firefox ESR=38.0.5
Mozilla Firefox ESR=38.1.0
Mozilla Firefox ESR=38.1.1
Mozilla Firefox ESR=38.2.0
Mozilla Firefox ESR=38.2.1
Mozilla Firefox ESR=38.3.0
Mozilla Firefox ESR=38.4.0
Mozilla Firefox ESR=38.5.0
Mozilla Firefox ESR=38.5.1
Mozilla Firefox ESR=38.6.0
Mozilla Firefox ESR=38.6.1
Event History
Mar 13, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1957?
CVE-2016-1957 has been classified as a denial of service vulnerability due to a memory leak.
2
How do I fix CVE-2016-1957?
To mitigate CVE-2016-1957, update Mozilla Firefox and Firefox ESR to version 45.0 or later.
3
Which versions of Mozilla Firefox are affected by CVE-2016-1957?
CVE-2016-1957 affects Mozilla Firefox versions prior to 45.0 and Firefox ESR versions prior to 38.7.
4
Can CVE-2016-1957 be exploited remotely?
Yes, CVE-2016-1957 can be exploited remotely through specially crafted MPEG-4 files.
5
Does CVE-2016-1957 affect SUSE or openSUSE?
Yes, CVE-2016-1957 affects SUSE Package Hub for SLE 12 and various versions of openSUSE.