CVE-2015-2710: Buffer Overflow
Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2710?
The severity of CVE-2015-2710 is classified as critical, as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2015-2710?
To fix CVE-2015-2710, update your Mozilla Firefox or Thunderbird to the latest version beyond the affected releases.
What versions are affected by CVE-2015-2710?
CVE-2015-2710 affects Mozilla Firefox versions before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7.
What type of vulnerability is CVE-2015-2710?
CVE-2015-2710 is a heap-based buffer overflow vulnerability.
Can CVE-2015-2710 be exploited without user interaction?
Yes, CVE-2015-2710 can be exploited remotely through crafted SVG graphics data without user interaction.