| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 42.0 |
The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free