Security vulnerabilities fixed in - Firefox 70 — Mozilla

🗓️ 22 Oct 2019 00:00:00Reported by Mozilla FoundationType

Security vulnerabilities fixed in Firefox 70 by Mozilla. Corrects packet length derivation in WebRTC, XML input parsing issue in libexpat, IndexedDB value storage vulnerability, XBL Bindings injection in CSS rules, address bar manipulation, stack buffer overflow, data URI form access loophole, cross-origin window method access, HTML entity processing issue, 'Click to Play' permission prompt vulnerability, Content Security Policy bypass, and memory safety bugs

Reporter	Title	Published	Views	Family All 659
ibm	Security Bulletin: Vulnerabilities in Expat component shipped with IBM Rational ClearCase (CVE-2019-15903)	27 Mar 202014:17	–	ibm
ibm	Security Bulletin: IBM Tivoli Monitoring Basic Services component (CVE-2019-15903)	12 Feb 202015:57	–	ibm
ibm	Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2019-15903)	2 Jun 202016:38	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities of Mozzila Firefox (less than Firefox 68.2.0 ESR) have affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF09	19 Dec 201905:23	–	ibm
ibm	Security Bulletin: IBM MQ Appliance is affected by libexpat vulnerabilities (CVE-2018-20843, CVE-2019-15903)	3 Mar 202116:02	–	ibm
ibm	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	2 Feb 202122:11	–	ibm
ibm	Security Bulletin: Security Vulnerability in Expat affects IBM Netezza Analytics	11 Feb 202006:49	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affects IBM Engineering Requirements Management DOORS Next	18 Jun 202021:10	–	ibm
ibm	Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by vulnerabilities in libexpat	21 Jun 202120:26	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilties have been fixed in the IBM Security Access Manager and IBM Security Verify Access appliances.	16 Mar 202119:55	–	ibm

Vulners

Node

mozilla firefoxRange<70

Source	Link
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

22 Oct 2019 00:00Current

CVSS 26.8

CVSS 3.110

EPSS0.06707

SSVC