Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) by using a CANVAS element to trigger 2D rendering.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 缓冲区溢出漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 基于Linux平台的Mozilla Firefox 40.0.3及之前版本的gfx/2d/DataSurfaceHelpers.cpp文件中存在安全漏洞，该漏洞源于Cairo库使用32位色彩深度创建的显示表面错误地在16为色彩深度系统中显示。远程攻击者可通过使用CANVAS元素触发2D显示利用该漏洞获取进程内存中的敏感信息，或造成拒绝服务（越边界读取）。
CVSS Information
N/A
Vulnerability Type
N/A