CVE-2015-7178: Buffer Overflow
The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7178?
CVE-2015-7178 is rated as critical due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-7178?
To fix CVE-2015-7178, update Mozilla Firefox to the latest version or install the security patches provided.
What versions of Firefox are affected by CVE-2015-7178?
CVE-2015-7178 affects Mozilla Firefox versions up to 40.0.3 and all versions of Firefox ESR before 38.3.
What type of attacks can CVE-2015-7178 enable?
CVE-2015-7178 can allow attackers to execute arbitrary code or cause application crashes due to memory corruption.
Is CVE-2015-7178 specific to any operating system?
CVE-2015-7178 is primarily a vulnerability in Mozilla Firefox on Windows platforms.