CVE-2015-0827 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer11 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
1.0%
top 23.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla ThunderbirdMozilla Firefox ESR
Timeline
PublishedFeb 25
Latest updateMay 17

Description

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages5 packages

▶Ubuntumozilla/firefox< 36.0+build2-0ubuntu0.14.04.4+1
▶NVDmozilla/firefox35.0.1+215
▶NVDmozilla/firefox_esr5 versions+4
▶Ubuntumozilla/thunderbird< 1:31.5.0+build1-0ubuntu0.14.04.1

🔴Vulnerability Details

5
GHSA
GHSA-vh58-9cxv-5f36: Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36↗2022-05-17
▶
OSV
firefox regression↗2015-03-09
▶
OSV
thunderbird vulnerabilities↗2015-03-03
▶
OSV
CVE-2015-0827: Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36↗2015-02-25
▶
OSV
firefox vulnerabilities↗2015-02-25
▶

📋Vendor Advisories

4
Ubuntu
Firefox regression↗2015-03-09
▶
Ubuntu
Thunderbird vulnerabilities↗2015-03-03
▶
Ubuntu
Firefox vulnerabilities↗2015-02-25
▶
Red Hat
Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)↗2015-02-24
▶

💬Community

1
Bugzilla
CVE-2015-0827 Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)↗2015-02-24
▶