The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the DirectWriteFontInfo::LoadFontFamilyData function gfx/thebes/gfxDWriteFontList.cpp in the Firefox browser is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other unspecified effects throu...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the MPEG4Extractor::readMetaData function located in MPEG4Extractor.cpp, within libstagefright in Firefox and Firefox ESR browsers is related to a potential overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafte...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2015-08324)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended-support version of Firefox. libstagefright is one of the hard-coding support libraries. The 'Metadata::setData' function in t...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2015-08315)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 43.0, which stems from the program's failure to properly limit the availability of time information in the IFRAME Resource...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2015-08321)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A buffer overflow vulnerability exists in the 'XDRBuffer::grow' function in the js/src/vm/Xdr.cpp file in Mozilla Firefox versions prior to 43.0. A remote attacker could exploit this...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2015-08332)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 43.0 and Firefox ESR version...

Mozilla: Underflow through code inspection (MFSA 2015-145)

Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP...

UBUNTU-CVE-2015-7211

Mozilla Firefox before 43.0 mishandles the number sign character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors...

UBUNTU-CVE-2015-7210

Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function...

UBUNTU-CVE-2015-7217

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...

UBUNTU-CVE-2015-7205

Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP...

UBUNTU-CVE-2015-7220

Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)

The 1 AddWeightedPathSegLists and 2 SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)

Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted texture data...

The vulnerability of the Firefox browser, which allows a hacker to gain access to log files

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to log files through a specially created application...

The vulnerability of the Firefox browser, which allows a hacker to replace the address bar

The vulnerability of Firefox browsers is related to security settings errors. Exploiting this vulnerability allows a malicious actor to substitute the URL input by using specially crafted JavaScript code...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Firefox browser is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code by using the value of the NSAccessibilityIndexAttribute attribute in element HTML tables...

The vulnerability of the Firefox browser, which allows a hacker to gain access to protected information

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information through a specially crafted web page that sends NTLM requests...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the libjar library in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted ZIP archive...

Mozilla Firefox URL parsing implementation information disclosure vulnerability

Mozilla Firefox is an open source web browser. Mozilla Firefox's URL parsing implementation fails to properly recognize the slash character in the hostname in the Location header, allowing remote attackers to exploit this vulnerability to obtain sensitive information...