Mozilla Firefox ESR < 78.7.1

The version of Firefox ESR installed on the remote Windows host is prior to 78.7.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-06 advisory. - In the Angle graphics library, depth pitch computations did not take into account the block size and simply multiplied the...

Mozilla Firefox ESR Security Advisory (MFSA2021-06) - Windows

Mozilla Firefox ESR is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla has released security updates addressing a vulnerability affecting Firefox and Firefox ESR. An attacker can take advantage of this vulnerability to take control of an affected system. CISA encourages users and administrators to review the Mozilla security advisory for Firefox 85.0.1 and...

KLA12125 Buffer overflow vulnerability in Mozilla Firefox ESR

A buffer overflow vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service. Original advisories MFSA2021-06 Related products Mozilla-Firefox-ESR CVE list CVE-2020-16048 unknown Solution Update to the...

Updated firefox packages fix security vulnerabilities

When a HTTPS page was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the insecure framing CVE-2020-26976. If a user clicked into a...

Debian DLA-2539-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information disclosure. For Debian 9 stretch, these problems have been fixed in version 78.7.0esr-1deb9u1. We recommend that you upgrade your firefox-e...

Debian: Security Advisory (DLA-2539-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the implementation of the WebRTC technology for browser-based applications by Mozilla Firefox and Firefox-ESR allows a attacker to induce a service failure.

The vulnerability of the WebRTC streaming data transmission technology in Mozilla Firefox and Firefox-ESR implementations is related to an inappropriate type of payload type in the RTP packets sent. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

DLA-2539-1 firefox-esr - security update

Bulletin has no description...

CentOS 8 : thunderbird (CESA-2020:1495)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1495 advisory. - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 ...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0209-1 Rating: important References: 1181414 Cross-References: CVE-2020-15685 CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Affected Products: openSUSE Leap 15.2 An upda...

Debian: Security Advisory (DSA-4840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

The vulnerability of the WebRTC technology implementation in Mozilla Firefox and Firefox-ESR browsers allows a perpetrator to trigger a service failure.

The vulnerability of the WebRTC implementation in Mozilla Firefox and Firefox-ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve a lack of checks on parameters in IPC messages, which allows attackers to compromise data integrity.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the lack of checks on parameters in IPC messages. Exploiting these vulnerabilities can allow a remote attacker to compromise data integrity...

Debian DSA-4840-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Mozilla Security Advisories for Firefox 85,...