Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jmamj90

#54422of 56,330
4.3Total CVSS
Vulnerabilities · 1
PT-2016-1460
4.3
2016-03-08
Mozilla · Firefox Esr · CVE-2016-1957
**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 **Description** The issue is caused by a buffer overflow in the libstagefright library, which can be exploited by a remote attacker to cause a denial of service (memory consumption) using a specially crafted MPEG-4 file. This file triggers a delete operation on an array, leading to memory leak. **Recommendations** For Mozilla Firefox versions prior to 45.0, update to version 45.0 or later to resolve the issue. For Firefox ESR versions prior to 38.7, update to version 38.7 or later to resolve the issue.