CVE:CVE-2015-0805
CNNVD:CNNVD-201504-006
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 36.0.4及之前版本的Off Main Thread Compositing(OMTC)实现过程中存在安全漏洞，该漏洞源于程序与‘mozilla::layers::BufferTextureClient::AllocateForSurface’函数交互时，执行不正确的memset调用。远程攻击者可通过触发2D图形内容的渲染利用该漏洞执行任意代码，或造成拒绝服务（内存损坏和应用程序崩溃）。
solution:Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade mozilla firefox to a higher version than 36.0.4,and avoid the version (,36.0.4]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,and avoid the version 12.04,14.04,14.10