The vulnerability of the blendGaussianBlur function in Thunderbird email clients, Firefox browsers, and Firefox ESR allows a hacker to trigger a buffer overflow and execute arbitrary code on the target system.

The vulnerability of the blendGaussianBlur function in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow and execute arbitrary code on the...

Mozilla: Heap-buffer-overflow in blendGaussianBlur

The Mozilla Foundation Security Advisory describes this flaw as: Applying a CSS filter effect could have accessed out-of-bounds memory. This could have led to a heap-buffer-overflow, causing a potentially exploitable crash...