CVE-2014-1580

Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers a sequence of rendering operations for truncated GIF data within a CANVAS element.

Date published : 2014-10-15

http://www.securityfocus.com/bid/70431

http://www.mozilla.org/security/announce/2014/mfsa2014-78.html