Out-of-bounds Write Vulnerability in Mozilla Firefox 36.0

CVE-2015-0824 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.

Learn more about our Cis Benchmark Audit For Mozilla Firefox.