CVE-2015-7199: Buffer Overflow
The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7199?
CVE-2015-7199 has a severity rating that indicates a potential denial of service due to memory corruption.
How do I fix CVE-2015-7199?
To fix CVE-2015-7199, users should update Mozilla Firefox to version 42.0 or later, or upgrade Firefox ESR to version 38.4 or later.
What versions of Firefox are affected by CVE-2015-7199?
CVE-2015-7199 affects Mozilla Firefox versions up to 41.0.2 and Firefox ESR versions prior to 38.4.
Can CVE-2015-7199 lead to other impacts aside from denial of service?
Yes, CVE-2015-7199 may potentially allow remote attackers to cause unspecified impacts beyond denial of service.
How is CVE-2015-7199 exploited by attackers?
CVE-2015-7199 can be exploited by remote attackers through crafted web content that triggers memory corruption.