NetSight
IP …
high7.5

CVE-2015-7194

Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application cr…

Impact

Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.

Affected products

VendorProductAffected versions
MozillaFirefox
through 41.0.2
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1

Weakness classification

CWE-119

References