CVE-2016-5296

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...

Mozilla Firefox ESR Security Advisories (MFSA2016-89, MFSA2016-90) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Advisories (MFSA2016-89, MFSA2016-90) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

UBUNTU-CVE-2016-5297

An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...

Debian: Security Advisory (DSA-3716-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Releases Security Updates

Mozilla has released security updates to address multiple vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. Available updates include: Firefox 50 Firefox ESR 45.5 Users and administrators are encouraged...

Security vulnerabilities fixed in Firefox ESR 45.5 — Mozilla

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. Thi...

KLA10898 Code execution vulnerabilities in Adobe Flash Player

Multiple type confusion and use-after-free vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely. Technical details To update Adobe Flash Player ActiveX detected as Flash.oc...

Mozilla Firefox ESR < 45.4 Multiple Vulnerabilities

Binary data 9623.prm...

SUSE-SU-2016:2434-1 Security update for MozillaFirefox

MozillaFirefox was updated to version 45.4.0 ESR to fix the following issues: Security issues fixed: bsc999701 MFSA 2016-86: CVE-2016-5270: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString CVE-2016-5272: Bad cast in nsImageGeometryMixin CVE-2016-5276: Heap-use-after-free in...

[SECURITY] [DLA 636-2] firefox-esr regression update

Package : firefox-esr Version : 45.4.0esr-1deb7u2 The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 "Wheezy", these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages...

Debian DLA-636-2 : firefox-esr regression update

The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 'Wheezy', these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages. NOTE: Tenable Network Security has extracted the...

DLA-636-2 firefox-esr - regression update

Bulletin has no description...

Unspecified Code Execution Vulnerability in Mozilla Firefox and Firefox ESR Browser Engines

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified security vulnerability in the browser engines of Mozilla Firefox and Firefox ESR allows remote attackers to exploit the vulnerability to build malicious web pages that can b...

Mozilla Firefox and Firefox ESR DOMSVGLength Class Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the Mozilla Firefox and Firefox ESR DOMSVGLength class, which allows remote attackers to construct a malicious web page that can be tricked into...

Unspecified Man-in-the-Middle Code Vulnerability in Mozilla Firefox and Firefox ESR

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified security vulnerability exists in Mozilla Firefox and Firefox ESR, which allows remote attackers to exploit the vulnerability to construct malicious web pages that can be...

Debian DSA-3674-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mozilla Firefox ESR Security Advisories (MFSA2016-85, MFSA2016-86) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Advisories (MFSA2016-85, MFSA2016-86) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

CVE-2016-5274

Mozilla Firefox (and Thunderbird &lt;45.4) is affected by CVE-2016-5274 due to a use-after-free in nsFrameManager::CaptureFrameState, allowing remote attackers to execute arbitrary code by exploiting interactions between restyling and the Web Animations model. Affected products/versions: Firefox ...