Endpoint Vulnerability

Buffer overflow while decoding WebM video

Description

Using the Address Sanitizer tool, security researcher Atte Kettunen discovered a buffer overflow in the nestegg library when decoding a WebM format video with maliciously formatted headers. This leads to a potentially exploitable crash.

Affected Products

Thunderbird

References

CVE-2015-4511,