Mozilla Firefox ESR Security Advisory (MFSA2022-30) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Advisory (MFSA2022-30) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Advisory (MFSA2022-29) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Debian: Security Advisory (DSA-5193-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Security Advisory (MFSA2022-29) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

CVE-2022-36319

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR 102.1, Firefox ESR 91.12, Firefox 103, Thunderbird 102.1, and Thunderbird 91.12...

Mozilla Firefox ESR < 91.12

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-29 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different...

DSA-5193-1 firefox-esr - security update

Bulletin has no description...

Vulnerabilities fixed in Mozilla Firefox and Firefox ESR

Mozilla has fixed several vulnerabilities in Firefox and Firefox ESR. A malicious party could potentially exploit the vulnerabilities to collect system data or cause a denial-of-service by using up system resources. The vulnerabilities with reference CVE-2022-2505 and CVE-2022-36320 are rated...

CVE-2022-36318

When visiting directory listings for chrome:// URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR 102.1, Firefox ESR 91.12, Firefox 103, Thunderbird 102.1, and Thunderbird 91.12...

Mozilla Firefox ESR < 91.12

The version of Firefox ESR installed on the remote Windows host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-29 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinat...

Debian DSA-5193-1 : firefox-esr - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5193 advisory. - When visiting directory listings for chrome:// URLs as source text, some parameters were reflected. CVE-2022-36318 - When combining CSS properties for...

KLA12595 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in cursor can be exploited to spoo...

SUSE SLED15 / SLES15 Security Update : mozilla-nss (SUSE-SU-2022:2533-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2533-1 advisory. - A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially furth...

Security fix for the ALT Linux 10 package firefox-esr version 102.1.0-alt1

July 22, 2022 Pavel Vasenkov 102.1.0-alt1 - New ESR version. - Security fixes: + CVE-2022-36319 Mouse Position spoofing with CSS transforms + CVE-2022-36318 Directory indexes for bundled resources reflected URL parameters + CVE-2022-36314 Opening local &LTcode.lnk&LT/code files could cause...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client arises from copying buffers without checking the size of the input data. This allows an attacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability in the implementation of full-screen mode for browsers like Firefox, Firefox ESR, and the email client Thunderbird allows attackers to perform spoofing attacks.

The vulnerability in the implementation of full-screen mode for browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to an incorrect limitation on the number of user interface layers or frames that can be displayed. Exploiting this vulnerability allows a malicious actor...

The vulnerability in the implementation of the CORS (Cross-Origin Resource Sharing) mechanism in Firefox browsers, Firefox ESR, and the Thunderbird email client allows a hacker to circumvent security restrictions.

The vulnerability of the CORS Cross-Origin Resource Sharing mechanism implementation in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the inclusion of functions from an unreliable controlled domain. Exploiting this vulnerability allows a malicious actor to bypass...

The vulnerability of the Thunderbird email client and the Firefox ESR browser lies in a error during the processing of CSS style sheets accessible through internal URIs, such as “resource:”. This allows attackers to circumvent the implemented content security policies.

The vulnerability of the Thunderbird email client and the Firefox ESR browser is related to an error in processing CSS style sheets that are accessed through internal URIs, as “resource:”. Exploiting this vulnerability can allow a malicious actor to bypass implemented content security policies...

Mozilla Firefox ESR Security Advisory (MFSA2022-17) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...