CVE ID:	CVE-2014-8637
Description:	Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2015.0171.1   1.3.6.1.4.1.25623.1.0.851048   1.3.6.1.4.1.25623.1.0.850755   1.3.6.1.4.1.25623.1.1.4.2015.0173.1   1.3.6.1.4.1.25623.1.2.1.2015.02   1.3.6.1.4.1.25623.1.1.4.2015.0180.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8637 BugTraq ID: 72048 http://www.securityfocus.com/bid/72048 https://security.gentoo.org/glsa/201504-01 http://www.securitytracker.com/id/1031533 http://secunia.com/advisories/62242 http://secunia.com/advisories/62250 http://secunia.com/advisories/62253 http://secunia.com/advisories/62316 http://secunia.com/advisories/62418 http://secunia.com/advisories/62446 http://secunia.com/advisories/62790 SuSE Security Announcement: SUSE-SU-2015:0171 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html SuSE Security Announcement: SUSE-SU-2015:0173 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html SuSE Security Announcement: SUSE-SU-2015:0180 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html SuSE Security Announcement: openSUSE-SU-2015:0077 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:0192 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html XForce ISS Database: firefox-cve20148637-info-disc(99957) https://exchange.xforce.ibmcloud.com/vulnerabilities/99957