Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerability (USN-3238-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3238-1 advisory. An integer overflow was discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cau...

UBUNTU-CVE-2017-5377

A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerability affects Firefox 51...

UBUNTU-CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox 51...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2016-12657)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker could exploit the vulnerability to steal cookie-based authentication, execute arbitrary code, and...

UBUNTU-CVE-2016-9903

Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded as a document it could allow injecting content and script into an add-on's context. This vulnerability affects Firefox 50.1...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2016-2843)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2843 advisory. 45.5.1-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.5.1-1 - Updat...

UBUNTU-CVE-2016-9078

Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without t...

Mozilla Releases Security Update

Mozilla has released a security update to address a vulnerability in Firefox versions 49 and 50. A remote attacker could exploit this vulnerability to take control of an affected system. Available updates include: Firefox 50.0.1 Users and administrators are encouraged to review the Mozilla Securi...

Mozilla Firefox Elevation of Privilege Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. An elevation of privilege vulnerability exists in Mozilla Firefox versions prior to 50, which stems from the fact that WebExtensions can use the mozAddonManager API, and can be exploited by...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-11416)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A denial of service vulnerability exists in the 'nsRefreshDriver' function in versions of Mozilla Firefox prior to 50. An attacker can exploit this vulnerability to cause a denial of service...

Mozilla Firefox memory corruption vulnerability (CNVD-2016-11467)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox. The vulnerability allows an attacker to exploit the vulnerability and execute arbitrary code in the context of the affected application...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox browsers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure or execute arbitrary code using JavaScript code, which can redirect the user to another page...

Mozilla Firefox 'mozilla::a11y::HyperTextAccessible::GetChildOffset' function code execution vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox 'mozilla::a11y::HyperTextAccessible::GetChildOffset' function allows remote attackers to build malicious web pages that can be exploited to trick users into parsing them, which can crash the application...

Mozilla Firefox and Firefox ESR 'mozilla::a11y::DocAccessible::ProcessInvalidationListk' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the Mozilla Firefox and Firefox ESR 'mozilla::a11y::DocAccessible::ProcessInvalidationListk' function, which allows remote attackers to exploit the...

Mozilla Firefox and Firefox ESR 'mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the Mozilla Firefox and Firefox ESR 'mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap' function, which allows remote attackers to construct...

CVE-2016-5283

Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized...

Mozilla: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList (MFSA 2016-85, MFSA 2016-86)

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

The vulnerability of the Firefox browser, which allows a hacker to replace the address bar

The vulnerability of Firefox browsers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to substitute the URL field using special characters in the data:URL format...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the nsXULPopupManager::KeyDown function in Firefox and Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory corruption, application termination by...

The vulnerability of the Firefox browser, which allows a hacker to replace the address bar

The vulnerability of the Firefox browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to substitute the address bar by using left-to-right writing symbols, combined with writing them using right-to-left writing methods...