Debian DLA-1829-1 : firefox-esr security update

Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website. For Debian 8 'Jessie', this problem has been fixed in version 60.7.1esr-1deb8u1. We recommend that you...

Mozilla Firefox ESR Security Advisories (MFSA2019-19, MFSA2019-20) - Windows

Mozilla Firefox ESR is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] [DLA 1829-1] firefox-esr security update

Package : firefox-esr Version : 60.7.1esr-1deb8u1 CVE ID : CVE-2019-11707 Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website. For Debian 8 "Jessie", this...

Mozilla Firefox and Firefox ESR CVE-2019-11708 Security Bypass Vulnerability

Description Mozilla Firefox and Firefox ESR are prone to a security-bypass vulnerability. An attacker may leverage this issue to bypass certain security restrictions and perform unauthorized actions. This issue is fixed in: Firefox 67.0. Firefox ESR 60.7.2 Technologies Affected Mozilla Firefox 0....

Debian: Security Advisory (DSA-4466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR < 60.7.2

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.7.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-19 advisory. - Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes ca...

DLA-1829-1 firefox-esr - security update

Bulletin has no description...

Security fix for the ALT Linux 10 package firefox-esr version 60.7.2-alt1

June 20, 2019 Andrey Cherepanov 60.7.2-alt1 - New ESR version 60.7.2. - Fixed: + CVE-2019-11708 sandbox escape using Prompt:Open...

KLA11505 Incorrect parameters parsing vulnerability in Mozilla Firefox ESR

Vulnerability, related to insufficient vetting of parameters passed with the Prompt:Open IPC message was found in Mozilla Firefox. Malicious users can exploit this vulnerability via specially designed website to bypass security restrictions. Original advisories mfsa2019-19 Related products...

Debian DSA-4466-1 : firefox-esr - security update

Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Mozilla Firefox ESR Security Advisories (MFSA2019-16, MFSA2019-18) - Mac OS X

Mozilla Firefox ESR is prone to a type confusion vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-11707

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR 60.7.1, Firefox 67.0.3, and Thunderbird 60.7.2...

Mozilla Firefox ESR Security Advisories (MFSA2019-16, MFSA2019-18) - Windows

Mozilla Firefox ESR is prone to a type confusion vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox ESR < 60.7.1 Security Vulnerability

Binary data 700741.prm...

Security fix for the ALT Linux 10 package firefox-esr version 60.7.1-alt1

June 18, 2019 Andrey Cherepanov 60.7.1-alt1 - New ESR version 60.7.1. - Fixed: + CVE-2019-11707 Type confusion in Array.pop...

DSA-4466-1 firefox-esr - security update

Bulletin has no description...

KLA11508 Type confusion vulnerability in Mozilla Firefox ESR

Type confusion vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories mfsa2019-18 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related produc...

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla has released security updates to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild. The Cybersecurity and Infrastructure Security Agency CISA...

Mozilla Firefox ESR < 60.7.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.7.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-18 advisory. - A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This c...

Mozilla Firefox ESR < 60.7.1

The version of Firefox ESR installed on the remote Windows host is prior to 60.7.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-18 advisory. - A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow f...