EUVD-2016-6210

Malware in sbrugna...

Firefox ESR Code Execution

The vulnerability of the CanonicalizeXPCOMParticipant function in Firefox and Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a script, thereby shutting down services during an embedded...

CVE-2016-5259

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

DEBIAN-CVE-2016-5259

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

CVE-2016-5259

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

CVE-2016-5259

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

CVE-2016-5259: Use After Free

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

CVE-2016-5259

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

PT-2016-2526

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 48.0 Firefox ESR 45.x versions prior to 45.3 Description The issue is related to a use-after-free vulnerability in the CanonicalizeXPCOMParticipant function. This vulnerability can be exploited by a remote...

Firefox Code Execution

The vulnerability of the CanonicalizeXPCOMParticipant function in Firefox browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by manipulating the XMLHttpRequest function remotely...

Mozilla Firefox/Firefox ESR CanonicalizeXPCOMParticipant function memory misreference vulnerability (CNVD-2015-04342)

Mozilla Firefox is a web browser released by Mozilla. A memory misreference vulnerability exists in the Mozilla Firefox/Firefox ESR CanonicalizeXPCOMParticipant function, which can be exploited by remote attackers to execute arbitrary code...

CVE-2015-2733: Undefined Security Weakness

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker...

CVE-2015-2722: Undefined Security Weakness

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

CVE-2015-2722

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

UBUNTU-CVE-2015-2722

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

PT-2015-1434

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Mozilla Firefox ESR versions prior to 31.8 Mozilla Firefox ESR versions prior to 38.1 Description The issue is related to a use-after-free vulnerability in the CanonicalizeXPCOMParticipant function. This...

PT-2015-1439

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Firefox ESR versions prior to 31.8 Firefox ESR versions prior to 38.1 Description The issue is related to a use-after-free vulnerability in the CanonicalizeXPCOMParticipant function. This vulnerability ca...