CVE-2015-0806 in Firefox

Resumen (Inglés)

The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2015-01-07

Divulgación

2015-04-01

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
74509	Mozilla Firefox Off Main Thread Composer AllocateForSurface Ejecución remota de código	17	No probado	Arreglo oficial	CVE-2015-0806

Fuentes

• MITRE
• NVD
• CVE Details