NetSight
IP …
medium6.8

CVE-2015-2710

Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote at…

Impact

Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.

Affected products

VendorProductAffected versions
MozillaThunderbird
through 31.5
MozillaFirefox
Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1, 31.5.2
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0
NovellSuse Linux Enterprise Software Development Kit
Version 12.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Server
Version 12.0
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References