|Title||Mozilla Firefox /Firefox ESR XSL Use-After-Free Remote Code Execution|
|Description||A vulnerability in some versions of Mozilla Firefox and Firefox ESR could lead to remote code execution.|
|Observation||A vulnerability in some versions of Mozilla Firefox and Firefox ESR could lead to remote code execution.
The flaw occurs while manipulating XSL in XSLT documents. Successful exploitation by a remote attacker could result in the execution of arbitrary code.
|Recommendation||The vendor has released an update to address the issue:
|Attack Vector||Malicious local network traffic|
|Created At||2017-01-24 00:00:00 UTC|
|Updated At||2017-02-08 10:37:27 UTC|