CVE-2015-4512

CVSS v2.0 6.4 (Medium)

EPSS 5.41 % (93^th)

Affected Products 2

Advisories 2

gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) by using a CANVAS element to trigger 2D rendering.

Weaknesses

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2015-09-24 04:59:15
(9 years ago)
Updated Date: 2016-12-22 02:59:55
(7 years ago)

Affected Products

Linux

Linux Kernel

Mozilla

Firefox

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox 40.0.3 and prior versions	cpe:2.3:a:mozilla:firefox	<= 40.0.3
OR
	Running on/with
	Linux Kernel	cpe:2.3:o:linux:linux_kernel