CVE-2016-5275

Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.

Score

CVSS 3.0 8.8 High

Status

Modified - security@mozilla.org

Published

2016-09-22

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Firefox (Mozilla)

References

• http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
• http://www.securityfocus.com/bid/93052
• http://www.securitytracker.com/id/1036852
• https://bugzilla.mozilla.org/show_bug.cgi?id=1287316
• https://security.gentoo.org/glsa/201701-15