Mozilla

mozilla

Mozilla Foundation Security Advisory 2014-64

Crash in Skia library when scaling high quality images

Announced
July 22, 2014
Reporter
John
Impact
High
Products
Firefox, Firefox ESR, Thunderbird
Fixed in
  • Firefox 31
  • Firefox ESR 24.7
  • Thunderbird 24.7
  • Thunderbird 31

Description

Mozilla community member John reported a crash in the Skia library when scaling high quality images if the scaling operation takes too long. This is caused by the image data being discarded while still in use by the scaling operation. This crash is potentially exploitable on some systems.

In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts.

References