foundation-security-advisories/announce/2014/mfsa2014-64.md

announced	fixed_in	impact	reporter	title
July 22, 2014	Firefox 31 Thunderbird 31 Firefox ESR 24.7 Thunderbird 24.7	High	John	Crash in Skia library when scaling high quality images

Description

Mozilla community member John reported a crash in the Skia library when scaling high quality images if the scaling operation takes too long. This is caused by the image data being discarded while still in use by the scaling operation. This crash is potentially exploitable on some systems.

In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts.

References

• Crash in [@ skia::`anonymous namespace''::ConvolveHorizontally(unsigned char const*, skia::ConvolutionFilter1D const&, unsigned char*) ] (CVE-2014-1557)