Posted on Thursday, March 10 2016 @ 13:39 CET by Thomas De Maesschalck
Mozilla rolled out Firefox 45 on Tuesday, this new version features a total of
23 security bulletins. Among them are nine vulnerability bulletins ranked as critical, seven rated as important, six with a moderate rating and one marked as low priority. In total, the advisories plug 40 vulnerabilities, 22 of which are deemed critical.
The majority of the bugs were discovered in the Graphite 2 font processing library. A total of 14 bugs were named in one advisory alone, of which there are heap buffer overflow read and write problems, uninitialized memory errors and out-of-bounds write errors.
Combined with another vulnerability, an out-of-bounds write with a malicious font, and you have a potentially exploitable crash on your hands.
Via: ZD Net
