5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
74.4%
Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly
initialize memory for BMP images, which allows remote attackers to obtain
sensitive information from process memory via a crafted web page that
triggers the rendering of malformed BMP data within a CANVAS element.