Mozilla Firefox ESR memory corruption vulnerability (CNVD-2018-09766)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox ESR versions prior to 52.7. A remote attacker can exploit this vulnerability to execute arbitrary...

firefox security update

52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.7.3-1 - Update to 52.7.3 ESR...

firefox: Use-after-free in compositor potentially allows code execution

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Mozilla Firefox ESR < 52.7.3

The version of Firefox ESR installed on the remote Windows host is prior to 52.7.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used...

Mozilla Firefox ESR < 52.7.3

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.7.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer...

Debian DLA-1321-1 : firefox-esr security update

Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 'Wheezy', these problems have been fixed in version 52.7.3esr-1deb7u1. We recommend that you upgrade your firefox-esr...

Debian DSA-4153-1 : firefox-esr - security update

It was discovered that a use-after-free in the compositor of Firefox can result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4153. The text itself is copyright C Softwar...

[SECURITY] [DLA 1321-1] firefox-esr security update

Package : firefox-esr Version : 52.7.3esr-1deb7u1 CVE ID : CVE-2018-5148 Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 "Wheezy", these problems have been fixed in...

[SECURITY] [DSA 4153-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4153-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2018 https://www.debian.org/security/faq -...

CVE-2018-5148

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...

UBUNTU-CVE-2018-5148

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...

Mozilla Firefox ESR Security Advisories (MFSA2018-10, MFSA2018-10) - Mac OS X

Mozilla Firefox ESR is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian: Security Advisory (DLA-1321-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Security Advisories (MFSA2018-10, MFSA2018-10) - Windows

Mozilla Firefox ESR is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DLA-1321-1 firefox-esr - security update

Bulletin has no description...

DLA-1319-1 firefox-esr - security update

Bulletin has no description...

DSA-4153-1 firefox-esr - security update

Bulletin has no description...

[SECURITY] [DLA 1319-1] firefox-esr security update

Package : firefox-esr Version : 52.7.2esr-1deb7u1 CVE ID : CVE-2018-5146 CVE-2018-5147 Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code. For Debian 7 "Wheezy", these problems have been...