Remote Yes

Type Arbitrary code execution

Description

A buffer overflow vulnerability has been discovered in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function when working with empty filters during canvas rendering.

AVG-24 firefox 48.0.2-1 49.0-1 Critical Fixed

22 Sep 2016 ASA-201609-22 AVG-24 firefox Critical multiple issues

https://bugzilla.mozilla.org/show_bug.cgi?id=1287316