Описание
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 40.0.3+build1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [40.0.3+build1-0ubuntu0.14.04.1]] |
| precise | released | 40.0.3+build1-0ubuntu0.12.04.1 |
| trusty | released | 40.0.3+build1-0ubuntu0.14.04.1 |
| trusty/esm | DNE | trusty was released [40.0.3+build1-0ubuntu0.14.04.1] |
| upstream | released | 40.0.3 |
| vivid | released | 40.0.3+build1-0ubuntu0.15.04.1 |
Показывать по
10 Critical
CVSS2
Связанные уязвимости
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
Use-after-free vulnerability in the CanvasRenderingContext2D implement ...
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
10 Critical
CVSS2