Integer overflow vulnerability in createImageBitmap() in Mozilla Firefox and Firefox ESR - CVE-2017-5428 (Mac OS X)| ID: oval:org.secpod.oval:def:39471 | Date: (C)2017-03-20 (M)2023-11-19 |
| Class: VULNERABILITY | Family: macos |
Mozilla Firefox or Firefox ESR before 52.0.1 :- An integer overflow in createImageBitmap() was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the createImageBitmap API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer.
| Platform: |
| Apple Mac OS 14 |
| Apple Mac OS 13 |
| Apple Mac OS 12 |
| Apple Mac OS 11 |
| Apple Mac OS X 10.15 |
| Apple Mac OS X 10.14 |
| Apple Mac OS X 10.13 |
| Apple Mac OS X 10.9 |
| Apple Mac OS X 10.10 |
| Apple Mac OS X 10.11 |
| Apple Mac OS X 10.12 |
| Product: |
| Mozilla Firefox |
| Mozilla Firefox ESR |
