Mozilla Firefox and Firefox ESR libvpx Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability in the 'vp9initcontextbuffers' function in the Mozilla Firefox libvpx allows remote attackers to construct a malicious WEB page that can be tricked into being parsed by the user to crash the application or execute...

Mozilla Firefox and Firefox ESR 'ConvertDialogOptions' function buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in the Mozilla Firefox 'ConvertDialogOptions' function, which allows attackers to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrary code...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)

The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger a service failure.

The vulnerability of the nsTSubstring::ReplacePrep function in browsers such as Firefox, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger service interruptions or exert other effects on the system.

The vulnerability of the nsTArrayImpl class in Firefox browsers, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

UBUNTU-CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

The vulnerability of the Firefox ESR browser allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the IndexedDB implementation in Firefox ESR browsers is related to type confusion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the Firefox ESR browser, which allows a hacker to influence the operation of the program

The vulnerability of the nsZipArchive::BuildFileList function, which allows access to arbitrary memory cells, is related to code errors in Firefox ESR browsers. Exploiting this vulnerability could enable a malicious actor to manipulate the program’s behavior remotely by using a specially crafted...

The vulnerability of the Firefox ESR browser allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox ESR is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code...

The vulnerability of the Firefox ESR browser, which allows a hacker to execute arbitrary code

The vulnerability of the CanonicalizeXPCOMParticipant function in Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating the XMLHttpRequest function remotely...

The vulnerability of the Firefox ESR browser, which allows a hacker to gain access to the contents of memory cells

The vulnerability of the ArrayBufferBuilder::append function in Firefox ESR is caused by buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain access to the contents of memory cells...

Mozilla Network Security Services Encryption Issue Vulnerability

Mozilla Firefox, Firefox ESR, and Thunderbird are all developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox; and Thunderbird is a separate email client from the Mozilla Application Suite. Thunderbird is a...

UBUNTU-CVE-2015-2734

The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors...

PT-2016-1278 · Mozilla +6 · Firefox Esr +7

Name of the Vulnerable Software and Affected Versions: Libgraphite versions 1.2.4 Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.6.1 Description: The issue is related to the SillMap::readFace function in FeatureMap.cpp, which mishandles a return value. This can be exploit...

UBUNTU-CVE-2015-0797

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service buffer over-read and application crash or possibly execute arbitrary code via crafted H.264 video data in an m4v...

UBUNTU-CVE-2014-1556

Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library...

Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)

The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting XSS attacks, via a crafted web sit...

CVE-2013-5591

Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via...

Mozilla: Calling scope for new Javascript objects can lead to memory corruption (MFSA 2013-82)

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by...

PT-2013-3338 · Mozilla +1 · Firefox Esr +5

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 23.0 Firefox ESR versions 17.x prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions 17.x prior to 17.0.8 Description: A stack-based buffer overflow issue exists in the Mozilla...