PT-2016-7869

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 50.1 Firefox ESR versions prior to 45.6 Thunderbird versions prior to 45.6 Description The issue is related to memory corruption, potentially leading to an exploitable crash. This occurs during the use of WebGL...

Mozilla Firefox ProgramBinary::linkAttributes Function Denial of Service Vulnerability

Mozilla Firefox is an open source web browser Mozilla Firefox versions prior to 41.0 and Firefox ESR versions prior to 38.3 contain a security vulnerability in ProgramBinary::linkAttributes, a function in libGLES within ANGLE, which incorrectly handles renderer access and can be exploited by remo...

Mozila ANGLE libGLES 'VertexBufferInterface::reserveVertexSpace' function buffer overflow vulnerability

Mozilla Firefox is an open source web browser.Google ANGLE is a graphics layer engine from Google Inc. A buffer overflow vulnerability in the 'VertexBufferInterface::reserveVertexSpace' function in libGLES of ANGLE used by Mozilla Firefox allows remote attackers to exploit specially crafted OpenG...

CVE-2015-7179

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2015-7178

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

Memory corruption

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

Buffer overflow

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2015-7179

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2015-7178

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

CVE-2015-7178

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

CVE-2015-7178

CVE-2015-7178 affects Mozilla Firefox on Windows via ANGLE’s libGLES, where the ProgramBinary::linkAttributes function mishandles shader access. This can allow a remote attacker to execute arbitrary code or cause a denial of service through crafted OpenGL/WebGL content, leading to memory corrupti...

CVE-2015-7179

The CVE-2015-7179 entry is confirmed public with concrete details: The flaw occurs in ANGLE’s libGLES used by Mozilla Firefox on Windows, in VertexBufferInterface::reserveVertexSpace. It allocates memory for shader attribute arrays incorrectly, enabling remote attackers to run arbitrary code or c...

CVE-2015-7178: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

CVE-2015-7179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

PT-2015-2191

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3 Description The issue is related to the incorrect allocation of memory for shader attribute arrays by the VertexBufferInterface::reserveVertexSpace function in...

PT-2015-2190

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3 Description The issue is related to the mishandling of shader access by the ProgramBinary::linkAttributes function in libGLES in ANGLE, which can be exploited by...