Security Advisory

CVE-2015-0825

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-02-25 11:00:00
Last updated 2024-08-06 04:26:10
Assigner mozilla
CVSS score not scored
State PUBLISHED

Description

Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.