CVE:CVE-2014-1557
CNNVD:CNNVD-201407-562
Google Skia是美国谷歌（Google）公司的一个开源且基于C++的图形库，它可应用于Mozilla Firefox、Google Chrome等浏览器中，也可用在Android开放手机平台中。
Mozilla Firefox、Firefox ESR和Thunderbird的Google Skia中的‘ConvolveHorizontally’函数中存在安全漏洞，该漏洞源于在函数执行期间，程序没有正确处理丢失的图像数据。远程攻击者可利用该漏洞执行任意代码。以下版本受到影响： Mozilla Firefox 30.0及之前版本，Firefox ESR 24.7之前的24.x版本和Thunderbird 24.6及之前版本。
solution:Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade mozilla firefox to a higher version than 30.0,and avoid the version (,30.0]; Upgrade mozilla firefox_esr to a higher version than 24.0,24.0.1,24.0.2,24.1.0,24.1.1,24.2,24.3,24.4,24.5,24.6,and avoid the version 24.0,24.0.1,24.0.2,24.1.0,24.1.1,24.2,24.3,24.4,24.5,24.6; Upgrade mozilla thunderbird to a higher version than 24.6,24.0,24.0.1,24.1,24.1.1,24.2,24.3,24.4,24.5,and avoid the version (,24.6],24.0,24.0.1,24.1,24.1.1,24.2,24.3,24.4,24.5; Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0