NetSight
IP …
medium4.3

CVE-2015-0827

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 all…

Impact

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

Affected products

VendorProductAffected versions
MozillaFirefox
through 35.0.1
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5
MozillaThunderbird
through 31.4
Versions 31.0, 31.1.2, 31.2, 31.3

Weakness classification

CWE-119

References