PT-2015-2882

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.5 Description The issue is related to an integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function. This allows remote attackers to execute...

CVE-2015-0806: Undefined Security Weakness

The Off Main Thread Compositing OMTC implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code o...

CVE-2015-0824: Improper Restriction of Operations within the Bounds of a Memory Buffer

The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service out-of-bounds write of zero values, and application crash via vectors that trigger use of DrawTarget and the Cairo library for image drawing...

PT-2015-4893

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Description The issue is related to the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to cause a denial of service. This can be achieved by triggering th...