CVE-2018-5091

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.6 and Firefox 58...

CVE-2018-5091

CVE-2018-5091 describes a use-after-free in Firefox/Firefox ESR during WebRTC connections when handling DTMF timers, leading to a potentially exploitable crash. Public sources indicate affected products are Firefox ESR versions prior to 52.6 and Firefox prior to 58. Upstream/agency advisories con...

EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1044)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...

EulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1043)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...

Debian DSA-4102-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or URL spoofing. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4102. The text...

[SECURITY] [DSA 4102-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4102-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 30, 2018 https://www.debian.org/security/faq -...

firefox security update

CentOS Errata and Security Advisory CESA-2018:0122 An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score,...

Security update for MozillaFirefox (important)

This update for MozillaFirefox fixes the following issues: - update to Firefox 52.6esr boo1077291 MFSA 2018-01 Speculative execution side-channel attack "Spectre" MFSA 2018-03 CVE-2018-5091 bmo1423086 Use-after-free with DTMF timers CVE-2018-5095 bmo1418447 Integer overflow in Skia library during...

[SECURITY] [DSA 4096-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4096-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 25, 2018 https://www.debian.org/security/faq -...

openSUSE Security Update : MozillaFirefox (openSUSE-2018-85)

This update for MozillaFirefox fixes the following issues : - update to Firefox 52.6esr boo1077291 MFSA 2018-01 - Speculative execution side-channel attack 'Spectre' MFSA 2018-03 - CVE-2018-5091 bmo1423086 Use-after-free with DTMF timers - CVE-2018-5095 bmo1418447 Integer overflow in Skia library...

CentOS 6 / 7 : firefox (CESA-2018:0122)

An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RedHat Update for firefox RHSA-2018:0122-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3544-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 / 7 : firefox (RHSA-2018:0122)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0122 advisory. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.6.0 ESR. Security Fixes: Multiple flaws were...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2018:0203-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Mozilla Firefox < 58 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 58. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include'compat.inc'; if description...

Mozilla Firefox < 58.0

The version of Firefox installed on the remote Windows host is prior to 58.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-02 advisory. - Mozilla developers and community members Calixte Denizet, Christian Holler, Alex Gaynor, Yoshi Huang, Bob Clary, Nils...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA...

CVE-2017-16575

CVE-2017-16575 affects Foxit Reader and is a remote code execution vulnerability in the XFA bind element. The root cause is a failure to validate the existence of an object before performing operations on it, enabling an attacker to execute arbitrary code in the current process when a user opens ...