NetSight
IP …
high7.5

CVE-2015-7212

Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow…

Impact

Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.

Affected products

VendorProductAffected versions
FedoraprojectFedora
Versions 22, 23
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
MozillaFirefox
through 42.0
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1

Weakness classification

CWE-189

References