← back
CVE-2015-7178

CVE-2015-7178

EPSS 3.4%
The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=1189860http://www.mozilla.org/security/announce/2015/mfsa2015-113.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securityfocus.com/bid/76816http://www.securitytracker.com/id/1033640