Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0 Firefox ESR 31.x before 31.3 Thunderbird before 31.3 and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.