CVE-2015-4493

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Firefox ESR versions prior to 38.2

Description The issue is related to a heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright. This allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data.

Recommendations For Mozilla Firefox versions prior to 40.0, update to version 40.0 or later. For Firefox ESR versions prior to 38.2, update to version 38.2 or later.