cve/2015/CVE-2015-2717.md

CVE-2015-2717

Description

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1154683

Github

No PoCs found on GitHub currently.