Mozilla

Mozilla Foundation Security Advisory 2015-128

Memory corruption in libjar through zip files

Announced
November 3, 2015
Reporter
Gustavo Grieco
Impact
High
Products
Firefox, Firefox ESR, Thunderbird
Fixed in
  • Firefox 42
  • Firefox ESR 38.4
  • Thunderbird 38.4

Description

Security researcher Gustavo Grieco reported a buffer underflow in libjar triggered through a maliciously crafted ZIP format file. This results in a potentially exploitable crash.

In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts.

References