The vulnerability of the nsJPEGEncoder::emptyOutputBuffer() function in the Mozilla Firefox browser and Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the nsJPEGEncoder::emptyOutputBuffer function in the Mozilla Firefox browser and Thunderbird email client is related to reading and writing data beyond the buffer’s memory limit. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...