RHEL 7 : firefox (RHSA-2020:2037)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2037 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2020-12392

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.8.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Security fix for the ALT Linux 10 package thunderbird version 68.8.0-alt1

May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New version 68.8.0. - Fixes: + CVE-2020-12397 Sender Email Address Spoofing using encoded Unicode characters + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-6831 Buffer overflow in SCTP chunk input validation + CVE-2020-12392 Arbitrary...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2018-1414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2018-1384)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12392

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:43+00:00| seen| https://t.me/cibsecurity/8439 2024-03-05 09:42:21+00:00| seen| https://t.me/ctinow/200042...

CVE-2019-12392

Anviz access control devices allow remote attackers to issue commands without a password...

CVE-2019-12392

CVE-2019-12392 affects Anviz access control devices. The vulnerability allows remote attackers to issue commands without a password, indicating unauthenticated command execution. According to NVD metrics, CVSSv2 base score 7.5 (HIGH) and CVSSv3.1 base score 9.8 (CRITICAL) with network access and ...

openSUSE Security Update : Mozilla Firefox (openSUSE-2019-855)

This update for Mozilla Firefox to version 60.3.0esr fixes security issues and stability bugs. The following security issues were fixed MFSA 2018-27, boo1112852 : - CVE-2018-12392: Crash with nested event loops - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript ...

CVE-2018-12392

creationtimestamp| type| source ---|---|--- 2019-02-28 20:24:25+00:00| seen| https://t.me/cibsecurity/2795...

CVE-2018-12392

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3...

CVE-2018-12392

CVE-2018-12392 is a vulnerability affecting Firefox (pre-63 and ESR pre-60.3) and Thunderbird (pre-60.3) where manipulating user events in nested loops while opening a document via script can trigger a crash due to poor event handling. Public advisories list the impact as a potentially exploitabl...

CVE-2018-12392

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3...

Critical: thunderbird

Issue Overview: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 CVE-2018-12390 Crash with nested event loops CVE-2018-12392 Memory safety bugs fixed in Firefox ESR 60.3 CVE-2018-12389 Integer overflow during Unicode conversion while loading JavaScript CVE-2018-12393 Affected Packages:...

Ubuntu: Security Advisory (USN-3868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2018:3656-1)

This update for MozillaFirefox fixes the following issues : Security issues fixed : Update to Mozilla Firefox 60.3.0esr: MFSA 2018-27 bsc1112852 CVE-2018-12392: Crash with nested event loops. CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript. CVE-2018-12395:...

EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1414)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 CVE-2018-12390 - Mozilla: Crash with nested event loops CVE-2018-12392 -...

CentOS Update for thunderbird CESA-2018:3532 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:3749-2)

This update for MozillaFirefox fixes the following issues : Security issues fixed : Update to Mozilla Firefox 60.3.0esr: MFSA 2018-27 bsc1112852 CVE-2018-12392: Crash with nested event loops. CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript. CVE-2018-12395:...