CVE-2015-4511

Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to…

published September 24, 2015

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04774 · 91.8th percentile
Published
2015-09-24T01:00Z
EPSS history
Timeline
  • 24 SEP 01:00Z
    Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to…
    cvelistv5