Mozilla Firefox / Thunderbird / Seamonkey / Firefox OS multiple security vulnerabilities

Restrictions bypass, memory corruptions...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Design/Logic Flaw

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Mozilla Firefox OS Denial of Service Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. In Mozilla Firefox OS versions prior to 2.2, an integer signature error exists in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer management implementation of the graphics...

Mozilla Firefox OS Security Mechanism Bypass Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. A security vulnerability exists in Mozilla Firefox OS versions prior to 2.2. It could allow an attacker in close physical proximity to access the UMS media volume via the usb interface, bypassing the passwor...

Mozilla Firefox OS Cross-Site Scripting Vulnerability (CNVD-2015-05190)

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, Gaia's Search application suffers from multiple cross-site scripting vulnerabilities in its implementation. These vulnerabilities can be exploited by remote attacker...

Mozilla Firefox OS Access Restriction Bypass Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, the COPPA error page in the Accounts Settings dialog box, embeds the contents of an external web server URL into a system process. This could allow a man-in-the-midd...

Mozilla Firefox OS Information Disclosure Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2 fail to restrict the wifi-manage privilege required to read Wi-Fi system messages. This could allow a remote attacker to exploit this vulnerability to obtain sensitiv...

CVE-2015-5962

Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS before 2.2 might allow attackers to cause a denial of service memory corruption via a negative value of a size paramete...

CVE-2015-5961

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view...

Design/Logic Flaw

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...

Integer overflow

Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS before 2.2 might allow attackers to cause a denial of service memory corruption via a negative value of a size paramete...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the 1 name or 2 title field in card content associated with a search link that is mishandled after a HOME button press or a Show Windows...

CVE-2015-2744

Cross-site scripting XSS vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view...

CVE-2015-4494: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtain potentially sensitive information via a crafted app...

CVE-2015-5961: Undefined Security Weakness

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...

CVE-2015-5961

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...