Security Advisory

CVE-2015-0824

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-02-25 11:00:00
Last updated 2024-08-06 04:26:11
Assigner mozilla
State PUBLISHED

Description

The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.