CVE-2015-4486

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Firefox ESR versions prior to 38.2

Description The issue is related to the decrease ref count function in the libvpx library, which can be exploited by remote attackers using malformed WebM video data. This can lead to the execution of arbitrary code or cause a denial of service due to an out-of-bounds read. The vulnerability is also described as a buffer overflow.

Recommendations For Mozilla Firefox versions prior to 40.0, update to version 40.0 or later. For Firefox ESR versions prior to 38.2, update to version 38.2 or later.