CVE-2015-7194
Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.
Date published : 2015-11-04
http://www.securityfocus.com/bid/77411
http://www.mozilla.org/security/announce/2015/mfsa2015-128.html
