CVE

Id
78069  
CVE No.
CVE-2015-0806  
Status
Candidate  
Description
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714051 78069 CVE-2015-0806 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-38.html  View
714052 78069 CVE-2015-0806 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1099437  View
714053 78069 CVE-2015-0806 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714054 78069 CVE-2015-0806 GENTOO:GLSA-201512-10  View
714055 78069 CVE-2015-0806 URL:https://security.gentoo.org/glsa/201512-10  View
714056 78069 CVE-2015-0806 SUSE:openSUSE-SU-2015:0677  View
714057 78069 CVE-2015-0806 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html  View
714058 78069 CVE-2015-0806 UBUNTU:USN-2550-1  View
714059 78069 CVE-2015-0806 URL:http://www.ubuntu.com/usn/USN-2550-1  View
714060 78069 CVE-2015-0806 SECTRACK:1031996  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11812 JVNDB-2015-007132 Cool Projects TarDiff における任意のファイルに書き込まれる脆弱性 Cool Projects TarDiff には、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2015-0858 78069 2.1 3.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007132.html  View