The vulnerability of the __proto__ mutation function in the JIT-compiler of the Firefox ESR browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the proto mutation function in the JIT-compiler of the Firefox ESR browser is related to type confusion errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Mozilla Firefox and Firefox ESR Command Execution Vulnerability (CNVD-2019-08525)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox ESR versions...

Mozilla Firefox and Firefox ESR IonMonkey JIT Compiler Type Obfuscation Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A type confusion vulnerability exists in the IonMonkey JIT compiler in Mozilla...

Mozilla: Type-confusion in IonMonkey JIT compiler

A vulnerability where type-confusion in the IonMonkey just-in-time JIT compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

UBUNTU-CVE-2019-9793

A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully...

Vulnerability in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service...

The vulnerability of the Mozilla Firefox browser, related to insufficient validation of input data when using full-screen mode, allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser is related to insufficient validation of input data when using full-screen mode. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by replacing the page or URI...

The vulnerability in the graphite2::Silf::readGraphite function of the Graphite library for Mozilla Firefox and Mozilla Firefox ESR browsers allows an attacker to cause a service failure or execute arbitrary code.

The vulnerability of graphite2::Silf::readGraphite in the Graphite 2 library for Mozilla Firefox and Mozilla Firefox ESR browsers relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary cod...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to a race in the signal processing mechanism, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to the situation of signal processing. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Mozilla Firefox Mixed Content Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 63. A remote attacker could exploit this vulnerability to cause the mixed content warning to fail to display...

Mozilla Firefox and Firefox ESR stack out-of-bounds read vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A stack out-of-bounds read vulnerability exists in Mozilla Firefox versions prior to 62.0.3 and...

Mozilla: stack out-of-bounds read in Array.prototype.push

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

Mozilla Firefox and Firefox ESR Buffer Overflow Vulnerability (CNVD-2018-18305)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A buffer overflow vulnerability exists in Mozilla Firefox ESR versions prior to 60.2 and Firefox...

Citrix Workspace App (CWA) for Linux – ICA File Not Launching Automatically

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149for more information. Overview The removal of NPAPI support by Firefox will affect user experience for users who access...

Code injection

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml...

CVE-2017-18103

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml...

CVE-2018-13389

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml...

CVE-2018-13389

CVE-2018-13389 affects Atlassian Confluence versions before 6.6.1. The vulnerability allows remote attackers to spoof web content in Mozilla Firefox by serving attachments with a content-type of application/rdf+xml, enabling content spoofing via the attachment resource. The Nessus entry and vendo...

Memory Misreference Vulnerability in Multiple Mozilla Products

Mozilla Firefox, Firefox ESR, and Thunderbird are products developed by the Mozilla Foundation.Firefox is an open source web browser, and Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client software...