Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)

Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data...

Mozilla: Use-after-free in XMLHttpRequest with shared workers (MFSA 2015-92)

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object...

UBUNTU-CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

VulnCheck KEV: CVE-2015-4495

Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges...

The vulnerability of the Firefox browser, which allows a hacker to influence the operation of the program

The vulnerability of the nsZipArchive::BuildFileList function, which allows access to arbitrary memory cells and Firefox browsers, is related to code errors. Exploiting this vulnerability could allow a remote attacker to influence the operation of the program using a specially crafted ZIP archive...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the PDF.js module for the Firefox browser is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by circumventing current access restrictions...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the nsXMLHttpRequest::AppendToResponseText method in Firefox browsers is caused by buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Firefox browser, which allows a hacker to gain access to the contents of memory cells

The vulnerability of the ArrayBufferBuilder::append function in Firefox is caused by buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain access to the contents of memory cells...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the CanonicalizeXPCOMParticipant function in Firefox browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by manipulating the XMLHttpRequest function remotely...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the CanonicalizeXPCOMParticipant function in Firefox browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by manipulating the XMLHttpRequest function remotely...

The vulnerability of the Firefox browser, which allows a hacker to read data from uninitialized memory areas

The vulnerability of the YCbCrImageDataDeserializer::ToDataSourceSurface function in Firefox browsers is related to code errors. Exploiting this vulnerability could allow an attacker to read data from uninitialized memory areas remotely...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Firefox browser arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2015-04354)

Mozilla Firefox is a web browser released by Mozilla. A security vulnerability exists in Mozilla Firefox versions prior to 39.0, which can be exploited by remote attacks to cause a denial of service memory corruption or application crash...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2015-04353)

Mozilla Firefox is a web browser released by Mozilla. A security vulnerability exists in Mozilla Firefox version 38.0 and Firefox ESR version 38.0, which can be exploited by remote attackers to read arbitrary files or execute arbitrary JS code via a constructed website...

Mozilla Firefox/Firefox ESR/Thunderbird CSPService::ShouldLoad Function Memory Misreference Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. A memory misreference vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird CSPService::ShouldLoad function, which can be exploited by remote attackers to execute arbitrary code...

UBUNTU-CVE-2015-2737

The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors...

Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-60)

Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions. NOTE: this vulnerability exists because of a...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive...

Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive...