CVE-2016-5278

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 49.0 Firefox ESR 45.x versions prior to 45.4 Thunderbird versions prior to 45.4

Description A heap-based buffer overflow issue exists in the nsBMPEncoder::AddImageFrame function, allowing remote attackers to execute arbitrary code via crafted image data that is mishandled during the encoding of an image frame to an image.

Recommendations For Mozilla Firefox versions prior to 49.0, update to version 49.0 or later. For Firefox ESR 45.x versions prior to 45.4, update to version 45.4 or later. For Thunderbird versions prior to 45.4, update to version 45.4 or later.