CVE-2014-1580

Published: 14 October 2014

Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers a sequence of rendering operations for truncated GIF data within a CANVAS element.

Status

References

• https://www.mozilla.org/security/announce/2014/mfsa2014-78.html
• https://ubuntu.com/security/notices/USN-2372-1
• https://www.cve.org/CVERecord?id=CVE-2014-1580
• NVD
• Launchpad
• Debian