CVE-2015-8510

Cross-site scripting XSS vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking...

CVE-2015-8511

Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

Lockscreen passcode bypass due to race condition — Mozilla

Shally Li was first to report a race condition in the lockscreen of Firefox OS that can be used to bypass the passcode lock of a Firefox OS device. Under certain circumstances on a locked device, the user will be dropped directly to the homescreen instead of being presented with the passcode inpu...

HTML injection in homescreen app bypassing DOM sanitizer — Mozilla

Mozilla fixed a bug in the l10n localization of the default homescreen app of Firefox OS reported by security researcher Muneaki Nishimura. Exploiting this issue requires tricking the user into bookmarking a specially crafted web page via the 'Add to home screen' functionality. As a result, an...

Firefox OS < 2.2 Multiple Vulnerabilities

Binary data 8878.prm...

The vulnerability of the Firefox OS operating system allows a perpetrator to gain access to protected information contained in system messages.

The vulnerability of the Firefox OS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information contained in system messages, through a specially crafted application...

The vulnerability of the Firefox OS operating system allows a hacker to bypass the password input mechanism and gain access to storage devices.

The vulnerability of the Firefox OS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass password input mechanisms and gain access to storage devices by using the device mounting interface...

The vulnerability of the Firefox OS operating system allows a hacker to inject arbitrary HTML code.

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code through a special search request executed after the browser...

The vulnerability of the Firefox OS operating system allows a hacker to circumvent existing access restrictions.

The vulnerability of the Firefox OS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to bypass existing access restrictions by conducting a type of “man-in-the-middle” attack...

Mozilla Firefox / Thunderbird / Seamonkey / Firefox OS multiple security vulnerabilities

Restrictions bypass, memory corruptions...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Design/Logic Flaw

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Mozilla Firefox OS Information Disclosure Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2 fail to restrict the wifi-manage privilege required to read Wi-Fi system messages. This could allow a remote attacker to exploit this vulnerability to obtain sensitiv...

Mozilla Firefox OS Security Mechanism Bypass Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. A security vulnerability exists in Mozilla Firefox OS versions prior to 2.2. It could allow an attacker in close physical proximity to access the UMS media volume via the usb interface, bypassing the passwor...

Mozilla Firefox OS Denial of Service Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. In Mozilla Firefox OS versions prior to 2.2, an integer signature error exists in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer management implementation of the graphics...

Mozilla Firefox OS Cross-Site Scripting Vulnerability (CNVD-2015-05190)

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, Gaia's Search application suffers from multiple cross-site scripting vulnerabilities in its implementation. These vulnerabilities can be exploited by remote attacker...

Mozilla Firefox OS Access Restriction Bypass Vulnerability

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, the COPPA error page in the Accounts Settings dialog box, embeds the contents of an external web server URL into a system process. This could allow a man-in-the-midd...

CVE-2015-5962

Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS before 2.2 might allow attackers to cause a denial of service memory corruption via a negative value of a size paramete...