PT-2015-2166 · Mozilla+3 · Qcms+4
Groebert
·
Published
2015-09-22
·
Updated
2024-12-12
·
CVE-2015-4504
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 41.0
Description
The issue is caused by a buffer overflow in the lut inverse interp16 function of the QCMS library. This can be exploited by a remote attacker using a specially crafted image, potentially allowing access to sensitive information or causing a denial of service, including a buffer over-read and application crash.
Recommendations
For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of images with manipulated ICC 4 profiles until the update is applied.
Exploit
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Firefox
Qcms
Suse
Ubuntu