SUSE CVE-2015-0825

Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code or trigger service denial-of-service attacks

The vulnerability of the mozilla::AudioSink function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure remotely...