The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or trigger a service failure.

The Mozilla Firefox ESR browser contains a vulnerability related to errors occurring when memory is used after it is freed in the imgRequestProxy function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using values of the content types from the image data...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the libxul.so!gfxContext::Polygon function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger service...

The vulnerability of the Firefox ESR browser, which allows a malicious individual to execute arbitrary code

Mozilla Firefox ESR contains a vulnerability related to errors in the implementation of the cairotruetypeindextoucs4 function in the Cairo library. Exploiting this vulnerability allows malicious individuals to execute arbitrary code remotely, using a specially crafted extension that processes fon...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or trigger a service failure.

The Mozilla Firefox ESR browser contains a vulnerability related to memory usage during JavaScript execution when working with the TypeObject class. Exploiting this vulnerability allows malicious actors to execute arbitrary code, resulting in excessive memory consumption during garbage collection...

The vulnerability of the Firefox ESR browser allows a malicious attacker to execute arbitrary code.

Mozilla Firefox ESR software contains a vulnerability in the nsJSThunk::EvaluateScript function. Exploiting this vulnerability allows an attacker to execute arbitrary code by manipulating the web notification API component...

The vulnerability of the Firefox ESR browser allows a malicious attacker to trigger a service failure or execute arbitrary code.

Mozilla Firefox ESR’s software contains a vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by manipulating the imgLoader object during image resizing operations...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of Firefox and Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using WebGL content...

CVE-2016-5020

F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification EAV monitor script...

DEBIAN-CVE-2016-4440

arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of service host OS crash or possibly execute arbitrary code on the host OS, via x2APIC mode...

DLA-521-1 firefox-esr - security update

Bulletin has no description...

Mozilla Firefox and Firefox ESR Privilege Gain Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A privilege-acquisition vulnerability exists in the maintenance service of Mozilla Firefox versio...

Mozilla Firefox and Firefox ESR ANGLE Denial of Service Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox.Google ANGLE Almost Native Graphics Google ANGLE Almost Native Graphics Layer Engine is a graphics...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-714)

This update to Mozilla Firefox 47 fixes the following issues boo983549 : Security fixes : - CVE-2016-2815/CVE-2016-2818: Miscellaneous memory safety hazards boo983638 MFSA 2016-49 - CVE-2016-2819: Buffer overflow parsing HTML5 fragments boo983655 MFSA 2016-50 - CVE-2016-2821: Use-after-free...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-704)

This update to Mozilla Firefox 47 fixes the following issues boo983549 : Security fixes : - CVE-2016-2815/CVE-2016-2818: Miscellaneous memory safety hazards boo983638 MFSA 2016-49 - CVE-2016-2819: Buffer overflow parsing HTML5 fragments boo983655 MFSA 2016-50 - CVE-2016-2821: Use-after-free...

Mozilla Firefox and Firefox ESR Buffer Overflow Vulnerability (CNVD-2016-03987)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A buffer overflow vulnerability exists in Mozilla Firefox versions prior to 47 and Firefox ESR...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2016-03990)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 47 and Firefox ES...

Debian: Security Advisory (DSA-3601-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3005-1 linux-lts-xenial vulnerabilities

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3006-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3006-1 advisory. Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use th...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3005-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3005-1 advisory. Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use th...