Security Advisory
CVE-2015-7189
6.8
Vulnerability Description
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.
Published Date
November 5, 2015
Official Source
NIST NVD Advisory