Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2017-22571)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 55 and Firefox ES...

Mozilla Firefox and Firefox ESR for Windows Security Bypass Vulnerability

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security bypass vulnerability exists in Windows-based versions of Mozilla Firefo...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2017-22575)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security bypass vulnerability exists in Mozilla Firefox versions prior to 55 and Firefox ESR...

Mozilla Firefox and Firefox ESR Buffer Overflow Vulnerability (CNVD-2017-22576)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A buffer overflow vulnerability exists in Mozilla Firefox versions prior to 55 and Firefox ESR...

Mozilla Firefox and Firefox ESR Same Origin Policy Bypass Vulnerability (CNVD-2017-22574)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A same-origin policy bypass vulnerability exists in Mozilla Firefox versions prior to 55 and...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2017-22577)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 55 and Firefox ES...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2017-22578)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security bypass vulnerability exists in Mozilla Firefox versions prior to 55 and Firefox ESR...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2017-22581)

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security bypass vulnerability exists in Mozilla Firefox versions prior to 55 and...

Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)

A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)

Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird 52.3, Firefox...

Mozilla: Use-after-free resizing image elements (MFSA 2017-19)

A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects...

Mozilla: Use-after-free with marquee during window resizing

A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox...

UBUNTU-CVE-2017-7787

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

The vulnerability in Firefox ESR and Firefox web browsers relates to the execution of operations beyond the buffer boundaries in memory, which allows an attacker to trigger a service failure.

The vulnerability in Firefox ESR and Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerabilities of the software platforms Flash Player for Linux, Flash Player, Adobe Integrated Runtime, and Adobe Flash Player Extended Support Release allow attackers to gain access to protected information.

The vulnerability of the Flash Player software platforms such as Flash Player for Linux, Adobe Integrated Runtime, and Adobe Flash Player Extended Support Release is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Design/Logic Flaw

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

Mozilla Firefox and Firefox ESR Denial of Service Vulnerability (CNVD-2017-12558)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A denial of service vulnerability exists in versions of Mozilla Firefox prior to 54 and Firefox ESR prior to 52.2. An attacker can exploit this...