Mozilla Firefox Security Bypass Vulnerability (CNVD-2020-02975)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 72, which stems from the program not applying content security policies to the XSL stylesheets of XML documents. An attacker could us...

Mozilla Firefox and Mozilla Firefox ESR Cross-Site Scripting Vulnerability (CNVD-2020-01175)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A cross-site scripting vulnerability exists in Mozilla Firefox ESR versions prio...

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WebBrowserPersist component in the Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebBrowserPersist component in the Firefox browser is related to errors that occur when executing the “Save Page As…” function. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of Firefox browsers, related to the lack of measures for cleaning input data, allows attackers to bypass the CSP security mechanism.

The vulnerability of Firefox browsers is related to the lack of measures for sanitizing input data. Exploiting this vulnerability can allow a remote attacker to bypass the CSP security mechanism...

The vulnerability of Firefox browsers arises from the lack of a warning about mixed content when the favicon of a web page is loaded via HTTP. This allows attackers to perform spoofing attacks.

The vulnerability of Firefox browsers arises from the lack of a warning about mixed content when the favicon of a web page is loaded via HTTP. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome allows a malicious actor to write arbitrary files to the device’s file system.

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the device’s file system remotely...

The vulnerability of the Firefox browser’s API component, which allows a hacker to replace the user interface

The vulnerability of the Firefox browser’s API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface using a specially crafted title parameter...

The vulnerability of the Firefox browser, related to the use of open redirection, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Firefox browser is related to the use of open redirecting. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vulnerability in Firefox web browsers, Firefox ESR, and Thunderbird email client, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Mozilla Firefox, Mozilla Firefox ESR and Thunderbird Resource Management Error Vulnerability

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

The vulnerability of Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to improper syntactic analysis of page content or interpretation of data entered by users. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to incorrect syntax analysis of page content or improper interpretation of data entered by users. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerabilities of browsers Firefox, Firefox ESR, and the email client Thunderbird involve memory usage after it is freed. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to the use of a certain data structure after it is freed upon deletion of the list manager currently in use. Exploiting these vulnerabilities allows an attacker who operates remotely to gain access ...

Vulnerabilities of browsers Firefox, Firefox ESR, and the email client Thunderbird, due to insufficient validation of input data, allow attackers to access confidential information.

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to the lack of data validation during the creation of hyperlinks in tabs, as well as when the link is later dragged into the web content area. Exploiting these vulnerabilities can allow an attacker ...

The vulnerability of the XSLT implementation for converting XML documents in Firefox browsers allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the XSLT transformation language for XML documents in Firefox browsers arises due to incorrect checking of number formatting boundaries during formatting operations. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the baseURI component in browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows attackers to influence the integrity of protected information.

The vulnerability of the baseURI component in browsers such as Firefox ESR, Firefox, and the email client Thunderbird is related to permission handling errors. Exploiting this vulnerability can allow a malicious actor to influence the integrity of protected information from a remote location...

The vulnerability of Firefox browser, related to the lack of protection for service data, allows attackers to obtain confidential information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to obtain confidential information...

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to trigger a service failure.

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability affects the implementation of the `Array.prototype.push` method in JIT-compilers of Firefox and Firefox ESR web browsers, allowing an attacker to execute arbitrary code.

The vulnerability of the Array.prototype.push method in JIT-compilers of Firefox and Firefox ESR browsers is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability in the Firefox web browser relates to the issue of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...