9267 matches found
Debian DLA-636-2 : firefox-esr regression update
The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 'Wheezy', these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages. NOTE: Tenable Network Security has extracted the...
DLA-636-2 firefox-esr - regression update
Bulletin has no description...
Unspecified Man-in-the-Middle Code Vulnerability in Mozilla Firefox and Firefox ESR
Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified security vulnerability exists in Mozilla Firefox and Firefox ESR, which allows remote attackers to exploit the vulnerability to construct malicious web pages that can be...
Unspecified Code Execution Vulnerability in Mozilla Firefox and Firefox ESR Browser Engines
Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified security vulnerability in the browser engines of Mozilla Firefox and Firefox ESR allows remote attackers to exploit the vulnerability to build malicious web pages that can b...
Mozilla Firefox and Firefox ESR DOMSVGLength Class Memory Misreference Vulnerability
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the Mozilla Firefox and Firefox ESR DOMSVGLength class, which allows remote attackers to construct a malicious web page that can be tricked into...
Mozilla Firefox ESR Security Advisories (MFSA2016-85, MFSA2016-86) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Mozilla Firefox ESR Security Advisories (MFSA2016-85, MFSA2016-86) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Debian DSA-3674-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
CVE-2016-5274
Mozilla Firefox (and Thunderbird <45.4) is affected by CVE-2016-5274 due to a use-after-free in nsFrameManager::CaptureFrameState, allowing remote attackers to execute arbitrary code by exploiting interactions between restyling and the Web Animations model. Affected products/versions: Firefox ...
CVE-2016-5281
IBM Storwize V7000 Unified is affected by CVE-2016-5281 (Mozilla Firefox use-after-free in DOMSVGLength) as part of a set of Firefox vulnerabilities bundled in IBM advisories. The IBM Security Bulletin lists affected code releases 1.5.1.0 to 1.5.2.4 and states a fix is available in version 1.5.2....
firefox security update
CentOS Errata and Security Advisory CESA-2016:1912 An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability...
Mozilla Firefox ESR 45.x < 45.4 Multiple Vulnerabilities (Mac OS X)
The version of Mozilla Firefox ESR installed on the remote Mac OS X host is 45.x prior to 45.4. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the HttpBaseChannel::GetPerformance function in netwerk/protocol/http/HttpBaseChannel.cpp due to the program leaking...
Debian Security Advisory DSA 3674-1 (firefox-esr - security update)
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or information disclosure. OpenVAS Vulnerability Test $Id: deb3674.nasl 6608 2017-07-07 12:05:05...
DSA-3674-1 firefox-esr - security update
Bulletin has no description...
Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20160921)
This update upgrades Firefox to version 45.4.0 ESR. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Mozilla Firefox ESR 45.x < 45.4 Multiple Vulnerabilities
The version of Mozilla Firefox ESR installed on the remote Windows host is 45.x prior to 45.4. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the HttpBaseChannel::GetPerformance function in netwerk/protocol/http/HttpBaseChannel.cpp due to the program leaking potential...
Mozilla Patches Certificate Pinning Vulnerability in Firefox
As expected, Mozilla patched a highly scrutinized flaw in its automated update process for add-ons in Firefox, specifically around the expiration of certificate pins. The vulnerability allowed attackers to intercept encrypted browser traffic, inject a malicious NoScript extension update and gain...
Mozilla: Memory safety bugs fixed in Firefox ESR 45.4 (MFSA 2016-85, MFSA 2016-86)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird 45.4 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
Debian: Security Advisory (DSA-3674-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
