860 matches found
UBUNTU-CVE-2017-5438
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...
Mozilla: Use-after-free in XSL (MFSA 2017-02)
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
Mozilla: Location bar spoofing with unicode characters (MFSA 2017-02)
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
UBUNTU-CVE-2017-5380
A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
UBUNTU-CVE-2016-9905
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
Mozilla: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (MFSA 2016-89, MFSA 2016-90)
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
Mozilla: Memory safety bugs fixed in Firefox ESR 45.4 (MFSA 2016-85, MFSA 2016-86)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird 45.4 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
DEBIAN-CVE-2016-5258
Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The numerous vulnerabilities in the Mozilla Firefox ESR browser engine allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this after liberation in DirectionalityUtils.cpp in Mozilla Firefox ESR allows malicious individuals operating remotely to execute arbitrary code using text that is improperly processed during the installation of its orientation and layout...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in Mozilla Firefox ESR allows malicious actors to execute arbitrary code using specially crafted WebGL content, created with the Cesium JavaScript library...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality of protected information.
A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox ESR, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this function after release in CERTDestroyCertificate in libnss3.so within the NSS Mozilla library for Firefox ESR allows malicious actors operating remotely to execute arbitrary code, thereby improperly deleting the NSSCertificate structure from the trusted domain...
The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.
The Mozilla Firefox ESR browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...
The vulnerability of the Firefox ESR browser allows local users to elevate their privileges level.
The Mozilla Firefox ESR browser contains a vulnerability that can be exploited when working with mar-files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar-files during updates...
The vulnerability of the Firefox ESR browser allows a malicious individual to gain access to confidential information.
The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the SVG filter. This vulnerability allows a malicious actor to gain access to confidential information about displacement and correlations, as well as to circumvent Domain Restrictions Policy SOP...
The vulnerability of the Firefox ESR browser allows a malicious attacker to execute arbitrary code.
Mozilla Firefox ESR software contains a vulnerability in the nsJSThunk::EvaluateScript function. Exploiting this vulnerability allows an attacker to execute arbitrary code by manipulating the web notification API component...
The vulnerability of the Firefox ESR browser, which allows a malicious individual to execute arbitrary code
Mozilla Firefox ESR contains a vulnerability related to errors in the implementation of the cairotruetypeindextoucs4 function in the Cairo library. Exploiting this vulnerability allows malicious individuals to execute arbitrary code remotely, using a specially crafted extension that processes fon...
The vulnerability of the Firefox ESR browser allows a malicious attacker to trigger a service failure or execute arbitrary code.
Mozilla Firefox ESR’s software contains a vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by manipulating the imgLoader object during image resizing operations...