DEBIAN-CVE-2023-4048

An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

Mozilla Firefox 后置链接漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. An elevation of privilege vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by an attacker to delete arbitrary files and gain...

The vulnerability in the full-screen mode of the Mozilla Firefox browser, which allows a hacker to perform a spoofing attack

The vulnerability of the full-screen mode of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability can allow a remote attacker to perform a spoofing attack...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in Mozilla Firefox versions prior to 115.0.2 and Firefox ESR versions prior to 115.0.2, which stems from a mix-up in the program's instructions...

ROS-2-2235

2.2235 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...

ROS-2-2226

2.2226 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...

ROS-2-1445

2.1445 Vulnerability in Mozilla Firefox browser CVE-2021-29967 1. Vulnerability description: Vulnerability in the Mozilla Firefox browser that allows an attacker to execute arbitrary code on the target system.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia : 2...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a resource management error vulnerability that can be exploited by an attacker to trigger post-release reuse when creating a WebRTC connection over HTTPS...

SUSE CVE-2023-34416

Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 102.12, Firef...

DEBIAN-CVE-2023-28164

Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

Vulnerability of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, arises due to an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of the Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code through a specially created websit...

The vulnerability of Firefox and Firefox ESR browsers, related to data type mixing errors, allows attackers to trigger a service failure.

The vulnerability of Firefox and Firefox ESR browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created website...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to information representation errors in the user interface. These vulnerabilities allow attackers to perform spoofing attacks.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow a malicious actor to perform a spear-phishing attack by manipulating the URL field...

The vulnerability of the Garbage Collector component in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collector component in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory during garbage collection. Exploiting this vulnerability allows an attacker to...

Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and...

The vulnerability of the NPAPI plugin of the Firefox browser on Windows operating systems, which allows a hacker to circumvent security restrictions

The vulnerability of the NPAPI plugin of the Firefox browser on Windows operating systems is related to errors in security settings when creating a new account. Exploiting this vulnerability can allow a remote attacker to circumvent security restrictions...

The vulnerability of the Mozilla Firefox browser, related to errors in processing hypertext links, allows a hacker to convert a URL address into a local path and gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to errors in processing hypertext links. Exploiting this vulnerability allows an attacker to convert a URL address into a local path and gain unauthorized access to protected information...

Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory described the issue in which Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 110 and ESR 102.8. Some of these bugs showed evidence of memory...

The vulnerability in the full-screen mode of the Mozilla Firefox browser, which allows a hacker to execute a spoofing attack

The vulnerability of the full-screen mode of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

SUSE CVE-2004-0718

The 1 Mozilla 1.6, 2 Firebird 0.7, 3 Firefox 0.8, and 4 Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...