CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

CVE-2016-5278: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

PT-2016-6338

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 49.0 Firefox ESR 45.x versions prior to 45.4 Thunderbird versions prior to 45.4 Description A heap-based buffer overflow issue exists in the nsBMPEncoder::AddImageFrame function, allowing remote attackers to...