CVE-2015-7175

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3

Description The issue is related to an "overflow" in the XULContentSinkImpl::AddText function, which might allow remote attackers to cause a denial of service, such as memory corruption and application crash. The vulnerability is caused by a buffer overflow.

Recommendations For Mozilla Firefox versions prior to 41.0, update to version 41.0 or later. For Mozilla Firefox ESR versions prior to 38.3, update to version 38.3 or later.