Use-after-free Vulnerability in Mozilla Firefox and Thunderbird

CVE-2015-2713

Summary

The vulnerability arises from a use-after-free condition in the SetBreaks function, which can be exploited by remote attackers. By crafting a document that includes specific CSS token sequences related to vertical text properties, an attacker can execute arbitrary code or achieve a denial of service through heap memory corruption. This issue affects users of Mozilla Firefox versions prior to 38.0, as well as Firefox ESR 31.x prior to 31.7 and Thunderbird versions before 31.7.

References