CVE ID:	CVE-2015-4475
Description:	The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2015.2081.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4475 BugTraq ID: 76294 http://www.securityfocus.com/bid/76294 https://security.gentoo.org/glsa/201605-06 RedHat Security Advisories: RHSA-2015:1586 http://rhn.redhat.com/errata/RHSA-2015-1586.html http://www.securitytracker.com/id/1033247 SuSE Security Announcement: SUSE-SU-2015:1449 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html SuSE Security Announcement: SUSE-SU-2015:1528 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html SuSE Security Announcement: SUSE-SU-2015:2081 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html SuSE Security Announcement: openSUSE-SU-2015:1389 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:1390 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html SuSE Security Announcement: openSUSE-SU-2015:1453 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html SuSE Security Announcement: openSUSE-SU-2015:1454 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html http://www.ubuntu.com/usn/USN-2702-1 http://www.ubuntu.com/usn/USN-2702-2 http://www.ubuntu.com/usn/USN-2702-3