Search for vulnerabilities
Vulnerability details: VCID-2bx8-2dn3-zyhv
Vulnerability ID VCID-2bx8-2dn3-zyhv
Aliases CVE-2015-7213
Summary Security researcher Ronald Crane reported a vulnerability found through code inspection. This issue is an integer overflow while processing an MP4 format video file when an a erroneously-small buffer is allocated and then overrun, resulting in a potentially exploitable crash. This issue only affects 64-bit versions with 32-bit versions being unaffected.In general this flaw cannot be exploited through email in the Thunderbird product, but is potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-190 Integer Overflow or Wraparound
System Score Found at
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
epss 0.02438 https://api.first.org/data/v1/epss?cve=CVE-2015-7213
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2015-146
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7213.json
https://api.first.org/data/v1/epss?cve=CVE-2015-7213
1291596 https://bugzilla.redhat.com/show_bug.cgi?id=1291596
CVE-2015-7213 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7213
mfsa2015-146 https://www.mozilla.org/en-US/security/advisories/mfsa2015-146
RHSA-2015:2657 https://access.redhat.com/errata/RHSA-2015:2657
RHSA-2016:0001 https://access.redhat.com/errata/RHSA-2016:0001
USN-2833-1 https://usn.ubuntu.com/2833-1/
USN-2859-1 https://usn.ubuntu.com/2859-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.84538
EPSS Score 0.02438
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:51.315112+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-146.md 37.0.0