Mozilla Firefox Security Advisory (MFSA2015-29) - Linux

This host is missing a security update for Mozilla Firefox.

Code execution through incorrect JavaScript bounds checking elimination Security researcher ilxu1a reported, through HP Zero Day Initiative's Pwn2Own contest, a flaw in Mozilla's implementation of typed array bounds checking in JavaScript just-in-time compilation (JIT) and its management of bounds checking for heap access. This flaw can be leveraged into the reading and writing of memory allowing for arbitrary code execution on the local system.

Firefox version(s) below 36.0.3.

Checks if a vulnerable package version is present on the target host.

The vendor has released an update. Please see the reference(s) for more information.