Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:17620
HistoryMay 02, 2019 - 5:49 a.m.

Arbitrary Code Execution

2019-05-0205:49:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.052 Low

EPSS

Percentile

93.0%

firefox is vulnerable to arbitrary code execution. A heap-based buffer overflow vulnerability in the nsBMPEncoder::AddImageFrame function allows remote attackers to execute arbitrary code via a malicious image data that is mishandled during the encoding of an image frame to an image which leads to a denial of service.