CVE-2014-1528

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 28.0 SeaMonkey version 2.25

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service by painting on a CANVAS element, resulting in an out-of-bounds write and application crash. This is due to a vulnerability in the sse2 composite src x888 8888 function in Pixman, as used in Cairo.

Recommendations For Mozilla Firefox version 28.0, update to a version that contains a fix for this issue. For SeaMonkey version 2.25, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the CANVAS element until a patch is available.