CVE-2015-0827

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-25 · updated 2026-06-17
Weakness: CWE-119

Description

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

Affected products

Mozilla Firefox: through 35.0.1; 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+226)
Mozilla Firefox ESR: 31.1, 31.2, 31.3, 31.4, 31.5
Mozilla Thunderbird: through 31.4; 31.0, 31.1.2, 31.2, 31.3

References

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
http://rhn.redhat.com/errata/RHSA-2015-0265.html
http://rhn.redhat.com/errata/RHSA-2015-0266.html
http://rhn.redhat.com/errata/RHSA-2015-0642.html
http://www.debian.org/security/2015/dsa-3174

Get alerted when CVE-2015-0827 or the next vulnerability affects your stack