critical10.0

CVE-2014-1528

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute…

Impact

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.

Affected products

Vendor	Product	Affected versions
Canonical	Ubuntu Linux	Versions 12.04, 12.10, 13.10, 14.04
Opensuse	Opensuse	Version 13.1
Opensuse Project	Opensuse	Version 12.3
Oracle	Solaris	Version 11.3
Mozilla	Firefox	Version 28.0
Mozilla	Seamonkey	Version 2.25
Fedoraproject	Fedora	Version 19

Weakness classification

CWE-119

References

NVD record
CVE.org record
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
http://secunia.com/advisories/59866
http://www.mozilla.org/security/announce/2014/mfsa2014-41.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1030163
http://www.securitytracker.com/id/1030164
http://www.ubuntu.com/usn/USN-2185-1
https://bugzilla.mozilla.org/show_bug.cgi?id=963962
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
http://secunia.com/advisories/59866
http://www.mozilla.org/security/announce/2014/mfsa2014-41.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1030163
http://www.securitytracker.com/id/1030164
http://www.ubuntu.com/usn/USN-2185-1
https://bugzilla.mozilla.org/show_bug.cgi?id=963962