Total vulnerabilities in the database
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | - | 2.0.0.1.x |
| mozilla / seamonkey | - | 1.0.7.x |
| mozilla / thunderbird | - | 1.5.0.9.x |