CVE-2015-2710

MEDIUM · 6.8 CVSS Gepubliceerd: 14-05-2015 CWE-119

Beschrijving

Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.

Vendors

Mozilla Novell Opensuse

Affected products

Thunderbird Firefox Firefox Esr Suse Linux Enterprise Software Development Kit Suse Linux Enterprise Desktop Suse Linux Enterprise Server Opensuse

References

lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
rhn.redhat.com
rhn.redhat.com
www.debian.org
www.debian.org
www.mozilla.org
www.oracle.com
www.securityfocus.com
www.ubuntu.com
www.ubuntu.com
bugzilla.mozilla.org
security.gentoo.org
www.mozilla.org