CVE-2015-4506

Name of the Vulnerable Software and Affected Versions libvpx versions as used in Mozilla Firefox before 41.0 Mozilla Firefox ESR versions 38.x before 38.3

Description The issue is caused by a buffer overflow in the vp9 init context buffers function in libvpx. This allows remote attackers to execute arbitrary code via a crafted VP9 file.

Recommendations For Mozilla Firefox before 41.0, update to version 41.0 or later. For Mozilla Firefox ESR versions 38.x before 38.3, update to version 38.3 or later.