vendor:
Firefox
by:
Project Zero
7,5
CVSS
HIGH
Out of Bound Read
125
CWE
Product Name: Firefox
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2017
Out of Bound Read Leading to Memory Disclosure in Firefox
The vulnerability is caused by a negative kernel unit length which leads to an out of bound access in ConvolvePixel() and out-of-bounds data is going to be copied into the SVG image. From there, it can be extracted by an attacker by loading the SVG image into a canvas element.
Mitigation:
Update to the latest version of Firefox to patch the vulnerability.
