| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 40.0.3 |
The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free