CVE-2015-0826: Improper Restriction of Operations within the Bounds of a Memory Buffer

The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read of heap memory via a crafted Cascading Style Sheets CSS token sequence that triggers a restyle or reflow operation...

PT-2015-4895

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Cascading Style Sheets CSS token sequence. This sequence triggers a restyle or reflow...