CVE-2014-1528

CVE-2014-1528 describes an out-of-bounds write vulnerability in the Pixman library, specifically within the sse2_composite_src_x888_8888 function, as utilized by Cairo in Mozilla Firefox and SeaMonkey on Windows. This flaw allows remote attackers to achieve arbitrary code execution or cause a denial of service by manipulating CANVAS elements. With a CVSS score of 10.0, this vulnerability is considered critical due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.