Russian Vulnerability Scanner Database

Back to List

CVE-2015-1538

Scores

EPSS

0.871high87.1%
0%20%40%60%80%100%

Percentile: 87.1%

CVSS

10.0critical2.0
0246810

CVSS Score: 10.0/10

All CVSS Scores

CVSS 2.0
10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvdubuntu

CWEs

CWE-189

Related Vulnerabilities

BDU:2015-11574

Exploits

Exploit ID: 38124

Source: exploitdb

URL: https://www.exploit-db.com/exploits/38124

Exploit ID: CVE-2015-1538

Source: github-poc

URL: https://github.com/niranjanshr13/Stagefright-cve-2015-1538-1

Vulnerable Software (7)

Type: Configuration

Product: android

Operating System: ubuntu trusty 14.04

Trait: 
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: android

Operating System: ubuntu vivid 15.04

Trait: 
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: android

Operating System: ubuntu wily 15.10

Trait: 
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: libhybris

Operating System: ubuntu trusty 14.04

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: libhybris

Operating System: ubuntu vivid 15.04

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: libhybris

Operating System: ubuntu wily 15.10

Trait: 
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Vendor: *

Product: android

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",      "versionEndIncluding": "5.1",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

End of list