Buffer overflow with SVG content and CSS — Mozilla

2015-05-1200:00:00

Mozilla Foundation

www.mozilla.org

0.051 Low

EPSS

Percentile

92.9%

JSON

Using the Address Sanitizer tool, security researcher Atte Kettunen found a buffer overflow during the rendering of SVG format graphics when combined with specific CSS properties on a page. This results in a potentially exploitable crash.

CPENameOperatorVersion
firefoxlt38
firefox esrlt31.7
firefox oslt2.2
seamonkeylt2.35
thunderbirdlt31.7
thunderbirdlt38.0.1

Name	Operator	Version
firefox	lt	38
firefox esr	lt	31.7
firefox os	lt	2.2
seamonkey	lt	2.35
thunderbird	lt	31.7
thunderbird	lt	38.0.1

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710

bugzilla.mozilla.org/show_bug.cgi?id=1149542

Buffer overflow with SVG content and CSS — Mozilla

References

Related