CVE-2015-4486

High

Published: 16/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The decrease_ref_count function in libvpx in Mozilla Firefox before version 40.0 and Firefox ESR 38.x before version 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

Risk Assessment

This vulnerability could lead to serious consequences, including system takeover or disruption of service. Organizations should be aware of the risks associated with playing malicious video files.

Recommendation

It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability. Additionally, avoid opening unknown or suspicious video files.

Other vulnerabilities in libvpx in Mozilla Firefox

CVE-2016-1972High
A race condition in libvpx in Mozilla Firefox before version 45.0 on Windows may allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

Original NVD description (English source)

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.