CVE-2015-0827

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Firefox ESR versions prior to 31.5 Thunderbird versions prior to 31.5

Description A heap-based buffer overflow issue exists in the mozilla::gfx::CopyRect function, allowing remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

Recommendations For Mozilla Firefox versions prior to 36.0, update to version 36.0 or later. For Firefox ESR versions prior to 31.5, update to version 31.5 or later. For Thunderbird versions prior to 31.5, update to version 31.5 or later.