PT-2015-4068 · Mozilla+3 · Firefox+4

Publicado

2015-01-13

·

Atualizado

2024-12-12

·

CVE-2014-8637

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 35.0 SeaMonkey versions prior to 2.32
Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element. This occurs due to improper memory initialization for BMP images.
Recommendations For Mozilla Firefox versions prior to 35.0, update to version 35.0 or later. For SeaMonkey versions prior to 2.32, update to version 2.32 or later.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2015-1082
ALT-PU-2015-1112
ALT-PU-2015-1464
CVE-2014-8637
MGASA-2015-0028
OPENSUSE-SU-2015_0077-1
OPENSUSE-SU-2015_0077-2
OPENSUSE-SU-2015_0192-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
USN-2458-1
USN-2458-2
USN-2458-3

Produtos afetados

Alt Linux
Firefox
Seamonkey
Suse
Ubuntu