Mozilla · Thunderbird · CVE-2014-1557
**Name of the Vulnerable Software and Affected Versions**
Mozilla Firefox versions prior to 31.0
Mozilla Firefox ESR versions prior to 24.7
Thunderbird versions prior to 24.7
**Description**
The issue exists in the `ConvolveHorizontally` function in Skia, used by Mozilla Firefox, Firefox ESR, and Thunderbird, due to incorrect handling of graphic data during function execution. This allows remote attackers to execute arbitrary code by triggering prolonged image scaling, such as scaling high-quality images.
**Recommendations**
For Mozilla Firefox versions prior to 31.0, update to version 31.0 or later.
For Mozilla Firefox ESR versions prior to 24.7, update to version 24.7 or later.
For Thunderbird versions prior to 24.7, update to version 24.7 or later.