openSUSE Security Update : MozillaFirefox (openSUSE-2020-461)

Mozilla Firefox was updated to 68.6.1esr to fix critical security issues : MFSA 2020-11 boo1168630 - CVE-2020-6819: Use-after-free while running the nsDocShell destructor - CVE-2020-6820: Use-after-free when handling a ReadableStream C Tenable Network Security, Inc. The descriptive text and packa...

SUSE-SU-2020:0928-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 68.6.1esr MFSA 2020-11 bsc1168630 CVE-2020-6819 bmo1620818 Use-after-free while running the nsDocShell destructor CVE-2020-6820 bmo1626728 Use-after-free when handling a ReadableStream...

OPENSUSE-SU-2020:0461-1 Security update for MozillaFirefox

Mozilla Firefox was updated to 68.6.1esr to fix critical security issues: MFSA 2020-11 boo1168630 CVE-2020-6819: Use-after-free while running the nsDocShell destructor CVE-2020-6820: Use-after-free when handling a ReadableStream...

CVE-2020-6819

creationtimestamp| type| source ---|---|--- 2020-04-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=466 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...

Mozilla Firefox < 74.0.1

The version of Firefox installed on the remote Windows host is prior to 74.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-11 advisory. - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware o...

Slackware 14.2 / current : mozilla-firefox (SSA:2020-094-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-094-01. The text itself is copyright C Slackware Linux,...

Debian DSA-4653-1 : firefox-esr - security update

Two security issues have been found in the Mozilla Firefox web browser, which could result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4653. The text itself is copyrigh...

Mozilla Firefox ESR < 68.6.1

The version of Firefox ESR installed on the remote Windows host is prior to 68.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-11 advisory. - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are awa...

Security update for MozillaFirefox (critical)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:0461-1 Rating: critical References: 1168630 Cross-References: CVE-2020-6819 CVE-2020-6820 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

MGASA-2020-0161 Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities: Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free CVE-2020-6819. Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free CVE-2020-6820...

Firefox Zero-Day Flaws Exploited in the Wild Get Patched

Mozilla patched two Firefox browser zero-day vulnerabilities actively being exploited in the wild. The flaws, both use-after-free bugs, have been part of “targeted attacks in the wild,” according to a Mozilla Foundation security advisory posted Friday. Both bugs have critical ratings and allow...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.6.1esr-i686-1slack14.2.txz: Upgraded. This release contains critical security fixes and improvements. "Und...

Security fix for the ALT Linux 10 package firefox-esr version 68.6.1-alt1

April 4, 2020 Andrey Cherepanov 68.6.1-alt1 - New ESR version 68.6.1. - Fixed: + CVE-2020-6819 Use-after-free while running the nsDocShell destructor + CVE-2020-6820 Use-after-free when handling a ReadableStream...

CVE-2020-6819

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird 68.7.0, Firefox 74.0.1, and Firefox ESR 68.6.1...

KLA11711 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in nsDocShell destructor can be exploited to cause denial of service. 2. Use after fre...

CVE-2019-6819

creationtimestamp| type| source ---|---|--- 2019-05-22 20:48:34+00:00| seen| https://t.me/cvemitreorg/170...

CVE-2018-6819

CVE-2018-6819 is rejected/not used as explicitly stated in the description.

CVE-2018-6819

...

CVE-2018-17685

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17685

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...