Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the nsDisplayList::HitTest function in Firefox and Firefox ESR browsers is related to incorrect display of changes on the screen. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Mozilla: Type confusion in display transformation (MFSA 2016-78)

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."...