The host is missing a security update according to Mozilla advisory, MFSA 2013-31. The update is required to fix integer signedness error vulnerability. A flaw is present in the applications, which fail to handle crafted values that trigger attempted use of a negative box boundary or negative box size, leading to an out-of-bounds write operation. Successful exploitation allows remote attackers to execute arbitrary code.