Out-of-bounds read In firefox
Description
The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:38.2.0-4.el5_11 | ||
rpm rhel7 | 0:38.2.0-1.el7_1 | ||
rpm rhel6 | 0:38.2.0-4.el6_7 | ||
rpm rhel7 | 0:38.2.0-4.el7_1 | ||
rpm rhel5 | 0:38.2.0-4.el5_11 | ||
rpm rhel6 | 0:38.2.0-4.el6_7 |
Aliases
1. 2. 3.