CVE-2015-0806 in Firefox
要約 (英語)
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
予約する
2015年01月07日
公開
2015年04月01日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 74509 | Mozilla Firefox Off Main Thread Composer AllocateForSurface リモートコード実行 | 17 | 未実証 | 公式な修正 | CVE-2015-0806 |