Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)

The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors...

UBUNTU-CVE-2015-4519

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the libstagefright library in Firefox and Firefox ESR browsers is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Vulnerabilities of Firefox and Firefox ESR browsers, which allow a hacker to execute arbitrary code or trigger a service failure

Multiple vulnerabilities in the drivers of Firefox and Firefox ESR browsers, caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code or cause system failures remotely...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger a service failure.

The vulnerability of the nsTSubstring::ReplacePrep function in browsers such as Firefox, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger service interruptions or exert other effects on the system.

The vulnerability of the nsTArrayImpl class in Firefox browsers, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Debian DSA-3333-1 : iceweasel - security update

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, integer overflows, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, bypass of the same-origin...

UBUNTU-CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Junos Operating System On Extended Support

According to its version, the remote Junos operating system has transitioned to an extended portion in its support life cycle. Continued access to new security updates requires a support service contract; without one, the host likely will be missing security updates. C Tenable Network Security,...

The vulnerability of the Firefox ESR browser, which allows a hacker to influence the operation of the program

The vulnerability of the nsZipArchive::BuildFileList function, which allows access to arbitrary memory cells, is related to code errors in Firefox ESR browsers. Exploiting this vulnerability could enable a malicious actor to manipulate the program’s behavior remotely by using a specially crafted...

The vulnerability of the Firefox ESR browser allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the IndexedDB implementation in Firefox ESR browsers is related to type confusion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the Firefox ESR browser, which allows a hacker to influence the operation of the program

The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox ESR browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the behavior of the program using a specially crafted ZIP archive...

The vulnerability of the Firefox ESR browser, which allows a violator to trigger a service failure

The vulnerability of the nsXMLHttpRequest::AppendToResponseText method in Firefox ESR browsers is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Firefox ESR browser, which allows a hacker to execute arbitrary code

The vulnerability of the CanonicalizeXPCOMParticipant function in Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating the XMLHttpRequest function remotely...

The vulnerability of the Firefox ESR browser allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox ESR is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code...

The vulnerability of the Firefox ESR browser, which allows a hacker to gain access to the contents of memory cells

The vulnerability of the ArrayBufferBuilder::append function in Firefox ESR is caused by buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain access to the contents of memory cells...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors...

KLA10626 Code execution vulnerability in Adobe Flash Player

Use-after-free and memory corruption vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via an unknown vectors. Original advisories Adobe advisory Exploitation Public...

Mozilla Network Security Services Encryption Issue Vulnerability

Mozilla Firefox, Firefox ESR, and Thunderbird are all developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox; and Thunderbird is a separate email client from the Mozilla Application Suite. Thunderbird is a...