The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The numerous vulnerabilities in the Mozilla Firefox ESR browser engine allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this after being released in DirectionalityUtils.cpp in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious individuals who operate remotely to execute arbitrary code using text that is improperly processed during the installation of its orientation and layout...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this function after release in nsTextEditRules::CreateMozBR in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this function after release in nsTextEditRules::CreateMozBR in Mozilla Firefox ESR allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...

The vulnerability of Thunderbird software allows a malicious attacker to compromise the confidentiality of protected information.

Vulnerability exists in Mozilla Firefox, Firefox ESR, and Thunderbird due to improper initialization of memory intended for displaying GIFs. Exploitation of this vulnerability allows malicious actors to gain access to confidential information from the process’s memory by using a specially crafted...

The vulnerability of the Firefox ESR browser allows a malicious attacker to execute arbitrary code or trigger a service denial.

Mozilla Firefox ESR software contains a vulnerability in the qcmsprofilefrommemory function. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by manipulating the web notification API component, thereby creating a custom ICC profile...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or trigger a service failure.

Mozilla Firefox ESR contains a vulnerability related to errors in the implementation of the TypedArrayObject class lack of checking the length of the final array before copying it. Exploiting this vulnerability allows malicious actors to execute arbitrary code or cause service failures logging...

The vulnerability of the Firefox ESR browser allows a malicious individual to circumvent window object restrictions.

The Mozilla Firefox ESR browser contains a vulnerability related to incompatibility with JavaScript software components. Exploiting this vulnerability allows malicious actors to bypass window object restrictions by utilizing incompatibility in the original method-extractors of various JavaScript...

Mozilla Firefox ESR 45.x < 45.1 Multiple Vulnerabilities

Binary data 9379.prm...

Mozilla Firefox ESR < 38.8 Multiple Vulnerabilities

Binary data 9378.prm...

Mozilla Firefox ESR < 45.2 Multiple Vulnerabilities

Binary data 9382.prm...

Mozilla Firefox ESR < 24.4 RCE

Binary data 9381.prm...

Debian DLA-519-1 : icedove security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases ESR of Thunderbird. Support for the 38.x serie...

[SECURITY] [DLA 521-1] firefox-esr security update

Package : firefox-esr Version : 45.2.0esr-1deb7u1 CVE ID : CVE-2016-2818 CVE-2016-2819 CVE-2016-2821 CVE-2016-2822 CVE-2016-2828 CVE-2016-2831 Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation erro...

DLA-521-1 firefox-esr - security update

Bulletin has no description...

CVE-2016-2822

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...

DEBIAN-CVE-2016-2822

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...

Design/Logic Flaw

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service UI outage, or conduct clickjacking or spoofing attacks, via a crafted web site...

Code injection

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...

CVE-2016-2818

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...