Security Vulnerabilities fixed in Firefox 44

Description

Security researcher Ronald Crane reported three vulnerabilities affecting released code that were found through code inspection. These include a high rated memory safety issue in the ANGLE graphics library, a moderate rated potential wild pointer flaw when handling zip files, and a critical rated integer overflow during metadata parsing in Mozilla's use of the libstagefright library.

Affected Applications

Firefox

CVE References

CVE-2016-1944 CVE-2016-1945 CVE-2016-1946

Other References

https://www.mozilla.org/en-US/security/advisories/mfsa2016-10