Mozilla Firefox and Firefox ESR gfx/2d/DataSurfaceHelpers.cpp Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox gfx/2d/DataSurfaceHelpers.cpp, which allows remote attackers to crash an application or execute arbitrary code by triggering a 2D display using the CANVAS element...

UBUNTU-CVE-2015-4501

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability in the CanvasRenderingContext2D implementation in Firefox and Firefox ESR browsers is related to incorrect handling of events related to size changes. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, using a sequence of characters for the CANV...

The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass the user’s confirmation process when installing updates.

The vulnerability of the Firefox and Firefox ESR extension installation subsystem is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the user’s confirmation process during the installation of updates, by using specially crafted data...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure.

The vulnerability of the js::jit::AssemblerX86Shared::lockaddl function in Firefox and Firefox ESR browsers is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure by manipulating shared memory...

The vulnerability of the Firefox browser, which allows a hacker to execute cross-site scripting attacks

The vulnerability of the nsCSPHostSrc::permits function in Firefox exists due to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code remotely...

The vulnerability of the Firefox browser, which allows attackers to carry out “man-in-the-middle” attacks

The vulnerability of Firefox browsers is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a remote attacker to carry out “man-in-the-middle” attacks...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger service interruptions or exert other effects on the system.

The vulnerability of the nsTArrayImpl class in Firefox browsers, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the stagefright::ESDS::parseESDescriptor function in Firefox and Firefox ESR browsers is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the StyleAnimationValue class StyleAnimationValue::operator in Firefox browsers, Firefox ESR, and the Firefox OS operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrit...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger a service failure.

The vulnerability of the nsTSubstring::ReplacePrep function in browsers such as Firefox, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the MediaStream component in the Firefox browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerabilities of Firefox and Firefox ESR browsers, which allow a hacker to execute arbitrary code or trigger a service failure

Multiple vulnerabilities in the drivers of Firefox and Firefox ESR browsers, caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code or cause system failures remotely...

Firefox browser’s vulnerabilities that allow a hacker to execute arbitrary code

Multiple vulnerabilities in the libstagefright library of the Firefox browser are related to integer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code remotely, using a specially crafted MPEG-4 video file header...

DEBIAN-CVE-2015-4486

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via malformed WebM video data...

Analysis of the latest firefox 0day attack-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-8/2015813114114594.jpg The Mozilla Foundation in the 8 May 6, as Firefox released a security update to fix the Firefox embedded PDF reader pdf. js in the cve-2 0 1 5-4 4 9 5 vulnerability. The vulnerability allows an attacker to bypass the same origin policy,in the local...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the IndexedDB implementation in the Firefox browser is related to type confusion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the Firefox ESR browser, which allows a hacker to read data from uninitialized memory areas

The vulnerability of the YCbCrImageDataDeserializer::ToDataSourceSurface function in Firefox ESR browsers is related to code errors. Exploiting this vulnerability may allow an attacker to read data from uninitialized memory areas remotely...

The vulnerability of the Firefox browser, which allows a hacker to read data from uninitialized memory areas

The vulnerability of the rx::d3d11::SetBufferData function in the implementation of the Firefox Direct3D 11 browser is related to errors in the code. Exploiting this vulnerability may allow a remote attacker to read data from uninitialized memory areas...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Firefox browser arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code...