CVE-2014-1528
Fixed in a distro release EPSS 6%
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
Products: canonical ubuntu_linux, opensuse, opensuse_project opensuse, oracle solaris, mozilla firefox, mozilla seamonkey, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 14.04 LTS | firefox | 29.0+build1-0ubuntu0.14.04.2 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |