|Title||Mozilla Firefox /Firefox ESR libGLES Remote Code Execution|
|Description||A vulnerability in some versions of Mozilla Firefox /Firefox ESR could lead to remote code execution.|
|Observation||A vulnerability in some versions of Mozilla Firefox /Firefox ESR could lead to remote code execution.
The flaw occurs due to a crash during WebGL functions using a vector constructor with a varying array within libGLES. Successful exploitation by a local attacker could result in the execution of arbitrary code.
|Recommendation||The vendor has released an update to address the issue:
|Attack Vector||Malicious local network traffic|
|Created At||2016-12-13 00:00:00 UTC|
|Updated At||2017-02-16 15:09:53 UTC|