[SECURITY] [DSA 3881-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3881-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 14, 2017 https://www.debian.org/security/faq -...

KLA11050 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Thunderbird. Malicious users can exploit these vulnerabilities to cause a denial of service, spoof user interface, bypass security protections and run arbitrary code. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerability...

CVE-2017-7773

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...

CVE-2016-7773

...

CVE-2016-7773

CVE-2016-7773 entry rejected; not used and does not represent an active vulnerability.

CVE-2015-7773

The CVE-2015-7773 issue affects Kirby CMS (Panel component) prior to 2.1.2. Affected: Kirby 2.1.1 and older; vulnerability: unrestricted file upload where an attacker with authentication can upload a file without an extension and rename it to .php to execute arbitrary PHP code on the server. Root...

CVE-2014-7773

The CVE-2014-7773 entry concerns the Android app Cleveland Football STREAM (com.appstronautme.clevelandfootballstream) version 2.1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive i...