Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2015-12-16	CVE-2015-7217	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image. network mozilla gnome opensuse fedoraproject CWE-119	4.3
2015-12-16	CVE-2015-7216	Improper Input Validation vulnerability in multiple products The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image. network fedoraproject mozilla gnome opensuse CWE-20	6.8