Lucene search

K
nessusTenable700338.PRM
HistoryAug 21, 2018 - 12:00 a.m.

Mozilla Firefox ESR < 52.8.1 RCE

2018-08-2100:00:00
Tenable
www.tenable.com
11

Versions of Mozilla Firefox ESR earlier than 52.8.1 are unpatched for an overflow condition exists in the β€˜SkScan::FillPath()’ function in β€˜core/SkScan_Path.cpp’ that is triggered as certain input is not properly validated when drawing paths with anti-aliasing turned off. This may allow a context-dependent attacker to cause a heap-based buffer overflow, resulting in a denial of service in a process linked against the library or potentially allowing the execution of arbitrary code.

Binary data 700338.prm
VendorProductVersionCPE
mozillafirefox_esrcpe:/a:mozilla:firefox_esr