CVE-2012-3969

Priority
Medium
Description
Integer overflow in the nsSVGFEMorphologyElement::Filter function in
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird
before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12
allows remote attackers to execute arbitrary code via a crafted SVG filter
that triggers an incorrect sum calculation, leading to a heap-based buffer
overflow.
References
Package
Upstream:released (15.0)
Ubuntu 14.04 LTS (Trusty Tahr):released (15.0+build1-0ubuntu1)
Package
Upstream:needs-triage
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Package
Upstream:released (15.0)
Ubuntu 14.04 LTS (Trusty Tahr):released (15.0+build1-0ubuntu1)
Package
Upstream:needs-triage
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Package
Upstream:needs-triage
Ubuntu 14.04 LTS (Trusty Tahr):DNE
More Information

Updated: 2017-08-11 23:49:31 UTC (commit 13081)