PT-2015-2166 · Mozilla+3 · Qcms+4
Groebert
·
Publicado
2015-09-22
·
Atualizado
2024-12-12
·
CVE-2015-4504
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 41.0
Description
The issue is caused by a buffer overflow in the lut inverse interp16 function of the QCMS library. This can be exploited by a remote attacker using a specially crafted image, potentially allowing access to sensitive information or causing a denial of service, including a buffer over-read and application crash.
Recommendations
For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of images with manipulated ICC 4 profiles until the update is applied.
Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Qcms
Suse
Ubuntu