Crash when accessing HTML tables with accessibility tools on OS X

Crash when accessing HTML tables with accessibility tools on OS X

Announced

November 3, 2015

Reporter

Frédéric Wang

Impact

Moderate

Products

Firefox

Fixed in

• Firefox 42

Description

Mozilla developer Frédéric Wang reported an issue affecting accessibility tools on OS X. This occurs when when an accessibility tool requests the index of a table row through the NSAccessibilityIndexAttribute value. This was caused by an error in how HTML tables are exposed to accessibility tools, which can result in a potentially exploitable crash.

This issue only affects OS X systems and does not affect Windows, Linux, or Android installations.

References

• Fix accessibilityAttributeValue for NSAccessibilityIndexAttribute (CVE-2015-7192)