Test ID:	1.3.6.1.4.1.25623.1.2.1.2015.147
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2015-147) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Integer underflow and buffer overflow processing MP4 metadata in libstagefright Mozilla developer Gerald Squelart fixed an integer underflow in the libstagefright library initially reported by Joshua Drake to Google. The issues occurred in MP4 format video file while parsing cover metadata, leading to a buffer overflow. This results in a potentially exploitable crash and can be triggered by a malformed MP4 file served by web content. Affected Software/OS: Firefox version(s) below 43. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7222 BugTraq ID: 79279 http://www.securityfocus.com/bid/79279 Debian Security Information: DSA-3422 (Google Search) http://www.debian.org/security/2015/dsa-3422 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html https://security.gentoo.org/glsa/201512-10 RedHat Security Advisories: RHSA-2015:2657 http://rhn.redhat.com/errata/RHSA-2015-2657.html http://www.securitytracker.com/id/1034426 SuSE Security Announcement: SUSE-SU-2015:2334 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html SuSE Security Announcement: SUSE-SU-2015:2335 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html SuSE Security Announcement: SUSE-SU-2015:2336 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html SuSE Security Announcement: openSUSE-SU-2015:2353 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html SuSE Security Announcement: openSUSE-SU-2015:2380 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html SuSE Security Announcement: openSUSE-SU-2015:2406 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html SuSE Security Announcement: openSUSE-SU-2016:0307 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html SuSE Security Announcement: openSUSE-SU-2016:0308 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html http://www.ubuntu.com/usn/USN-2833-1
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.