Crash using DrawTarget in Cairo graphics library

Related Vulnerabilities: CVE-2015-0824  

Mozilla Foundation Security Advisory 2015-22

Crash using DrawTarget in Cairo graphics library

Announced
February 24, 2015
Reporter
Atte Kettunen
Impact
Moderate
Products
Firefox, SeaMonkey
Fixed in
  • Firefox 36
  • SeaMonkey 2.33

Description

Security researcher Atte Kettunen used the Address Sanitizer tool to discover a crash while drawing images through the Cairo graphics library while using the DrawTarget function. This can result in a segmentation fault due to zero-ing out of memory outside the bounds of the image.

References