The vulnerability in the BodyStream::OnInputStreamReady component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability in the BodyStream::OnInputStreamReady component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...