CVE-2014-1528 The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of serv...
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.10 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse project opensuse | = 12.3 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| mozilla Firefox | = 28.0 | No fix listed |
| mozilla seamonkey | = 2.25 | No fix listed |
| fedoraproject fedora | = 19 | No fix listed |
References
- FEDORA-2014-5829 third-party-advisory vendor-advisory
- openSUSE-SU-2014:0599 third-party-advisory vendor-advisory
- openSUSE-SU-2014:0629 third-party-advisory vendor-advisory
- 59866 permissions-required third-party-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- 1030163 third-party-advisory vdb-entry
- 1030164 third-party-advisory vdb-entry
- USN-2185-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking