CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.

Date published : 2015-01-14

http://www.securityfocus.com/bid/72048

http://www.mozilla.org/security/announce/2014/mfsa2015-02.html