2 matches found
Mozilla Firefox and Firefox ESR nsImageGeometryMixin class arbitrary code execution vulnerability
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. The Mozilla Firefox and Firefox ESR nsImageGeometryMixin class fails to properly execute variables during processing of the INPUT element, allowing remote attackers to exploit the vulnerability t...
Mozilla: Bad cast in nsImageGeometryMixin (MFSA 2016-85, MFSA 2016-86)
The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, which allows remote attackers to execute arbitrary code via a crafted web site...