UBUNTU-CVE-2015-2734

The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors...

PT-2016-1278 · Mozilla +6 · Firefox Esr +7

Name of the Vulnerable Software and Affected Versions: Libgraphite versions 1.2.4 Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.6.1 Description: The issue is related to the SillMap::readFace function in FeatureMap.cpp, which mishandles a return value. This can be exploit...

PT-2016-1279 · Mozilla +5 · Firefox +9

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions 1.2.4 and earlier Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions 38.x prior to 38.6.1 Thunderbird affected versions not specified Description: The issue is related to the TtfUtil:LocaLookup function in...

PT-2016-1826 · Mozilla +5 · Firefox Esr +5

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox ESR versions 38.x through 38.7 Description: The issue is caused by a buffer overflow in the browser engine, which can be exploited by a remote attacker to cause a denial of service, such as memory corruption and application...

UBUNTU-CVE-2015-0797

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service buffer over-read and application crash or possibly execute arbitrary code via crafted H.264 video data in an m4v...

Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via...

Microsoft Ends Windows 7 Mainstream Support

On January 13, 2015, Microsoft's mainstream support for Windows 7 Service Pack SP 1 ended, which means the end of free Windows 7's "mainstream support" period, with the operating system now entering "extended support." Many people are still running the aging Windows XP as well as Windows 7...

UBUNTU-CVE-2014-1556

Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library...

Web Server on Extended Support

According to its self-reported version number, the web server installed on the remote host has transitioned to the extended support phase of its life cycle. Continued access to new security updates requires payment of an additional fee and / or configuration changes to the package management tool...

Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)

The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting XSS attacks, via a crafted web sit...

ColdFusion Extended Support Version Detection (credentialed check)

According to its version, there is at least one installation of ColdFusion that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support ends. C Tenable Netwo...

ColdFusion Extended Support Version Detection

According to its version, there is at least one installation of ColdFusion on the remote host that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support...

Debian Announces End of Security Support for IceApe

Developers at Debian today informed users still clinging to Iceape – an Internet suite modeled on old Mozilla code – that they are cutting the cord and will stop supplying the software with security updates. Iceape is more or less a Debian-branded hybrid of several community-driven entities,...

Oracle Java JRE Premier Support and Extended Support Version Detection (Unix)

According to its version, there is at least one install of Oracle formerly Sun Java JRE on the remote host that is potentially under either Premier Support or Extended Support. Note that both support programs require vendor contracts. Premier Support provides upgrades and security fixes for five...

Oracle Java JRE Premier Support and Extended Support Version Detection

According to its version, there is at least one install of Oracle formerly Sun Java JRE that is potentially under either Premier Support or Extended Support. Note that both support programs require vendor contracts. Premier Support provides upgrades and security fixes for five years after the...

CVE-2013-5591

Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via...

Mozilla: Calling scope for new Javascript objects can lead to memory corruption (MFSA 2013-82)

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by...

PT-2013-3338 · Mozilla +1 · Firefox Esr +5

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 23.0 Firefox ESR versions 17.x prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions 17.x prior to 17.0.8 Description: A stack-based buffer overflow issue exists in the Mozilla...

Debian DSA-2720-1 : icedove - several vulnerabilities

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of...

Debian Security Advisory DSA 2720-1 (icedove - several vulnerabilities)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of...