CVE:CVE-2014-1528
CNNVD:CNNVD-201404-593
Mozilla Firefox和SeaMonkey都是由美国Mozilla基金会开发。Firefox是一款开源Web浏览器。SeaMonkey是一套免费、开源以及跨平台的网络套装软件。
基于Windows平台的Mozilla Firefox 28.0版本和SeaMonkey 2.25版本使用的Cairo图形库中的Pixman的‘sse2_composite_src_x888_8888’函数存在缓冲区溢出漏洞。远程攻击者可利用该漏洞执行任意代码或造成拒绝服务（越边界写入和应用程序崩溃）。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,12.10,13.10,14.04,and avoid the version 12.04,12.10,13.10,14.04; Upgrade opensuse opensuse to a higher version than 13.1,and avoid the version 13.1; Upgrade opensuse_project opensuse to a higher version than 12.3,and avoid the version 12.3; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade mozilla firefox to a higher version than 28.0,and avoid the version 28.0; Upgrade mozilla seamonkey to a higher version than 2.25,and avoid the version 2.25; Upgrade fedoraproject fedora to a higher version than 19,and avoid the version 19