CVE-2015-0803: Undefined Security Weakness

The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free...

PT-2015-1046

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0 Description The issue is related to the HTMLSourceElement::AfterSetAttr function, which does not properly constrain the original data type of a casted value during the setting of a SOURCE element's...