PT-2015-2624 · Mozilla+5 · Firefox+6
Looben Yang
·
Published
2015-11-03
·
Updated
2024-12-12
·
CVE-2015-7189
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 42.0
Firefox ESR versions prior to 38.4
Description
The issue is related to a race condition in the
JPEGEncoder function, which can lead to a heap-based buffer overflow. This can be exploited by remote attackers via vectors involving a CANVAS element and crafted JavaScript code, potentially allowing them to execute arbitrary code or cause a denial of service.Recommendations
For Mozilla Firefox versions prior to 42.0, update to version 42.0 or later.
For Firefox ESR versions prior to 38.4, update to version 38.4 or later.
Exploit
Fix
RCE
DoS
Race Condition
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Firefox Esr
Firefox
Red Hat
Suse
Ubuntu