973 matches found
Mozilla: Use-After-Free when aborting an operation
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 68.12 and...
Mozilla: Use-After-Free when aborting an operation
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 68.12 and...
Mozilla: Overriding file type when saving to disk
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...
Mozilla: Use-After-Free when aborting an operation
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 68.12 and...
Mozilla: Use-After-Free when aborting an operation
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 68.12 and...
Mozilla: Bypassing iframe sandbox when allowing popups
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR 78.1, Firefox 79, and...
Mozilla: Use-After-Free when aborting an operation
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 68.12 and...
Mozilla Firefox ESR Code Issue Vulnerability
Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.11 for Android-based platforms. The vulnerability can be exploited by an attacker with the help o...
The vulnerability in web browsers Firefox ESR and Firefox, related to insufficient validation of input data, allows attackers to execute malicious code.
The vulnerability in web browsers Firefox ESR and Firefox is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Mozilla Firefox ESR Resource Management Error Vulnerability (CNVD-2020-46332)
Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.11 for Android-based platforms. The vulnerability can be exploited by an attacker with the help o...
Vulnerability of Firefox ESR and Firefox web browsers, as well as the Thunderbird email client, relates to the execution of operations beyond the buffer in memory, allowing attackers to trigger a service failure.
The vulnerability in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability affects the mechanism for executing scripts in Web Workers of Firefox ESR and Firefox browsers, as well as the Thunderbird email client. This allows attackers to trigger a service failure.
The vulnerability of the script for executing scenarios in Firefox ESR and Firefox web browsers, as well as in Thunderbird’s email client, is related to multi-threaded execution errors race conditions. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Mozilla Firefox Code Problem Vulnerability (CNVD-2020-46337)
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...
Mozilla Code Issues Vulnerabilities
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...
openSUSE Security Update : MozillaFirefox (openSUSE-2020-1034)
This update for MozillaFirefox fixes the following issues : - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 - MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR - Fixed: Security fix - Fixed: Fixed an accessibility...
DEBIAN-CVE-2020-12420
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR 68.10, Firefox 78, and Thunderbird 68.10.0...
DEBIAN-CVE-2020-12399
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird 68.9.0, Firefox 77, and Firefox ESR 68.9...
Multiple Mozilla Products Resource Management Error Vulnerability (CNVD-2020-54924)
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...
Multiple Mozilla Products Data Forgery Issue Vulnerabilities
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...
Mozilla Thunderbird, Firefox ESR and Firefox Injection Vulnerabilities
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...