The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-24002

When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

Mozilla Firefox 注入漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Firefox that allows an attacker to exploit the vulnerability to disclose arbitrary memory addresses, which may also lead to JIT-type obfuscation attacks. The...

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows an attacker to trigger memory corruption and execute arbitrary code on the target system.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption and execute arbitrary code on the target system...

The vulnerability of the Firefox browser, related to the use of memory after its release, allows a hacker to execute arbitrary code.

The vulnerability of the Firefox browser is related to the use of memory after it is freed when fonts are released from the cache. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the 3D CSS component in the Firefox browser, allowing attackers to perform spoofing attacks

The vulnerability of the 3D CSS component in the Firefox browser relates to the display of content outside the viewport of the web page. Exploiting this vulnerability can allow a malicious actor to perform spoofing attacks remotely...

The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows attackers to execute arbitrary code.

The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the JIT WebAssembly component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows a hacker to trigger a service failure.

The vulnerability of the JIT WebAssembly component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Responsive Design Mode in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, allows a hacker to execute arbitrary code.

The vulnerability of the Responsive Design Mode in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Mozilla: Port blocking could be bypassed

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

The vulnerability of Firefox ESR browser for Android operating systems, related to the lack of restrictions on file downloads, allows attackers to compromise the confidentiality of protected information.

The vulnerability of Firefox ESR browser for Android operating systems is related to the lack of restrictions on file downloads. Exploiting this vulnerability can allow attackers to compromise the confidentiality of protected information...

The vulnerability of Firefox ESR browser for Android operating systems, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of Firefox ESR browser for Android operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information...

The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 8 : firefox (RHSA-2021:0990)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0990 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

The vulnerability in the implementation of the isExceptionPending() function in Mozilla Firefox’s browser allows a violator to execute arbitrary code.

The vulnerability of the isExceptionPending function implementation in Mozilla Firefox’s browser is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Large number of vulnerabilities fixed in Xerox FreeFlow Print Server

Xerox has fixed a large number of vulnerabilities in Xerox FreeFlow Print Server. The vulnerabilities are in the following underlying components: Microsoft Windows 7 Java 8 Firefox Misuse of the vulnerabilities allow unauthenticated remote malicious actors to launch attacks that can result in the...

The vulnerability in the interface for supporting streaming audio and video data through the Media Capture and Streams API of the Mozilla Firefox browser allows attackers to perform cross-site scripting attacks.

The vulnerability of the Media Capture and Streams API for handling streaming audio and video data in the Mozilla Firefox browser is related to a request error from documents with URL addresses “data:” or “blob:”. Exploiting this vulnerability could allow an attacker to perform cross-site scripti...

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface of Mozilla Firefox allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface in Mozilla Firefox’s browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of DSA signatures in web browser software such as Firefox, Firefox-esr, and Thunderbird, which allows unauthorized access to confidential data due to information disclosure caused by discrepancies in signatures.

The vulnerability of DSA signatures in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, involves the disclosure of information due to incompatibility. Exploiting this vulnerability can allow attackers to gain access to confidential data...

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to reading data from memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...