Mozilla Foundation Security Advisory 2014-64
Crash in Skia library when scaling high quality images
- Announced
- July 22, 2014
- Reporter
- John
- Impact
- High
- Products
- Firefox, Firefox ESR, Thunderbird
- Fixed in
-
- Firefox 31
- Firefox ESR 24.7
- Thunderbird 24.7
- Thunderbird 31
Description
Mozilla community member John reported a crash in the Skia library when scaling high quality images if the scaling operation takes too long. This is caused by the image data being discarded while still in use by the scaling operation. This crash is potentially exploitable on some systems.
In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts.