Security vulnerabilities fixed in Firefox 56 — Mozilla

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake addre...

Mozilla Firefox for Android Local Security Bypass Vulnerability

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in versions of Mozilla Firefox for Android prior to version 54. The vulnerability can be exploited by an attacker to read local data with t...

Unspecified Vulnerability in Mozilla Firefox for Android (CNVD-2017-07066)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 53 for Android. An attacker can exploit the vulnerability to forge the contents of the address bar...

Mozilla Firefox for Android Security Bypass Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for Android. The vulnerability can be exploited by attackers to perform unauthorized operations and launch further attacks by bypassing...

Mozilla Firefox is vulnerable

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox has a security vulnerability. Allow SSL indicators may mislead users about the real URLs visited. Note: This issue only affects Firefox for Android. Desktop Firefox is not...

Disclosure of user actions through JavaScript with motion and orientation sensors — Mozilla

Security researcher Maryam Mehrnezhad of Newcastle University, UK reported an issue discovered by their research team, which also includes Ehsan Toreini, Siamak F. Shahandashti, and Feng Hao. They found vulnerabilities in Firefox for Android using orientation data and motion sensors on a mobile...

Lightweight themes on Firefox for Android do not verify a secure connection — Mozilla

Mozilla developer Margaret Leibovic reported when Firefox for Android installs lightweight themes, it does not check to verify that they are served over an HTTPS connection. Instead, themes can be installed over an unencrypted connection, which could allow for a man-in-the-middle MITM attack by...

CVE-2013-0798 : World read and write access to app_tmp directory on Android

Fourteenforty Research Institute, Inc. Security Advisory World read and write access to apptmp directory on Firefox for Android 2013/04/02 === Summary === World read and write access to apptmp directory on Firefox for Android allows replacing Firefox add-ons. === Severity === Middle === Affected...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7599)

Mozilla Firefox has been updated to the 17.0.5ESR release fixing bugs and security issues. Also Mozilla NSS has been updated to version 3.14.3 and Mozilla NSPR to 4.9.6. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other...