SUSE SLES11: MozillaFirefox / MozillaFirefox-translations-common / etc (SUSE-SU-2021:14743-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14743-1 advisory. Firefox Extended Support Release 78.11.0 ESR bsc1186696 CVE-2021-29964: Out of bounds-read when parsing a WMCOPYDATA message...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2020:14337-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14337-1 advisory. - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after- free. We are aware of targeted...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.11.0. Security Fixes: Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 Mozilla: Thunderbird stored OpenPGP secret keys without master password protecti...

Debian: Security Advisory (DLA-2673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2673-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 9 stretch, this problem has been fixed in version 78.11.0esr-1deb9u1. We recommend that you upgrade your firefox-esr packages. For the detaile...

Debian: Security Advisory (DSA-4925-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-29967

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 78.11,...

CVE-2021-29964

A locally-installed hostile program could send WMCOPYDATA messages that Firefox would process incorrectly, leading to an out-of-bounds read. This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird 78.11, Firefox 89, and Firefox ESR...

CVE-2021-29967

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 78.11,...

DSA-4925-1 firefox-esr - security update

Bulletin has no description...

KLA12194 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An out of bounds read vulnerability can be exploited to...

Mozilla Firefox ESR < 78.11

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 78.11. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-24 advisory. - Mozilla developers Gabriele Svelto, Anny Gakhokidze, Alexandru Michis, Christian Holler reported memory...

Security fix for the ALT Linux 10 package firefox-esr version 78.11.0-alt1

June 1, 2021 Andrey Cherepanov 78.11.0-alt1 - New version 78.11.0. - Security fixes: + CVE-2021-29964 Out of bounds-read when parsing a WMCOPYDATA message + CVE-2021-29967 Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11...

Mozilla Firefox ESR < 78.11

The version of Firefox ESR installed on the remote Windows host is prior to 78.11. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-24 advisory. - Mozilla developers Gabriele Svelto, Anny Gakhokidze, Alexandru Michis, Christian Holler reported memory safety bug...

CVE-2021-29951

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...

Ubuntu 20.04 LTS : Thunderbird vulnerabilities (USN-4936-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4936-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attack...

The vulnerability of the JIT WebAssembly component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows a hacker to trigger a service failure.

The vulnerability of the JIT WebAssembly component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Mozilla Firefox ESR Security Advisories (MFSA2021-18, MFSA2021-19) - Windows

Mozilla Firefox ESR is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security fix for the ALT Linux 10 package firefox-esr version 78.10.1-alt1

May 5, 2021 Andrey Cherepanov 78.10.1-alt1 - New version 78.10.1. - Security fixes: + CVE-2021-29951 Mozilla Maintenance Service could have been started or stopped by domain users...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, is related to errors with inherited permissions, allowing attackers to escalate their privileges.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to errors with inherited permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges using a specially crafted URL address...