CVE-2016-1957

4.3MEDIUM

Key Information

Vendor: Novell
Status: Suse Package Hub For Suse Linux Enterprise; Leap; Opensuse
Vendor: CVE Published:; 13 March 2016

Summary

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Mar 13, 2016
Vulnerability Reserved.
Jan 20, 2016

Collectors

NVD DatabaseMitre Database