DLA-1780-1 firefox-esr - new upstream version

Bulletin has no description...

Arbitrary Code Execution

Firefox, Firefox ESR and Thunderbird are vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable URI Handler component by spoofing the origin of a modal alert via iframe content and the 'data:' protocol leading to potential code execution...

Arbitrary Code Execution

Firefox and Firefox ESR are vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable Developer Tools component to allow code execution when opening a malicious page with the style editor tool due to improper sanitization of the web page source...

Out-of-bounds Write

Thunderbird, Firefox ESR, and Firefox are vulnerable to out-of-bounds write. ClearKeyDecryptor function can be exploited by a remote attacker to cause out-of-bounds write via decrypting some Clearkey-encrypted media content. This may lead to writing of arbitrary data within memory, resulting in a...

Buffer Overflow

Thunderbird, Firefox ESR, and Firefox are vulnerable to buffer overflow. An unauthenticated remote attacker could exploit the flaw in WebGL with the use of triggerable by web content, resulting in a potentially exploitable crash...

Denial Of Service

Thunderbird, Firefox ESR, and Firefox are vulnerable to denial of service attacks. A remote attacker could crash the system during bidirectional unicode manipulation with CSS animations leading to denial of service conditions...

Out-Of-Bounds Read

Thunderbird, Firefox ESR, and Firefox are vulnerable to out-of-bounds read. Improper processing of glyph widths during text layout could allow an attacker to read otherwise inaccessible memory and cause an application crash...

Buffer Overflow

Thunderbird, Firefox ESR, and Firefox are vulnerable to buffer overflow vulnerability. Improper formatted data containing in the header may allow an attacker to exploit this vulnerability. The affected component is application / http-index-format Handler...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. A remote attacker may cause an application crash by holding selection during scroll events resulting in denial of service conditions. The affected component is Selection Handler...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. Changing styles when manipulating DOM elements may cause the application to crash resulting in denial of service conditions. The affected component is Style Change Handler...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. XSLT processing due to the result handler being held by a freed handler during handling may cause the application to crash...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. XSLT processing due to poor handling of template parameters may cause the application to crash causing denial of service...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. Transaction processing in the editor during design mode interactions may result in a potentially exploitable crash leading to denial of service...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. Redirecting focus handling may cause the application to crash via the Focus Handler component resulting in denial of service conditions...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. Certain text input selection via the component Input Selection Handler may cause an application crash...

Denial Of Service (DoS)

Firefox ESR and Thunderbird are vulnerable to denial of service DoS attacks. An attacker is able to crash the application by exploiting the vulnerable EnumerateSubDocuments function while adding or removing sub-documents...

Privilege Escalation

Firefox Firefox ESR and Thunderbird are vulnerable to privilege escalation. A remote user can create a specially crafted SVG image that, when loaded by the target user, will access restricted external resources via 'data:' URLs. The affected component is SVG Image Handler...

Man-in-the-Middle

Mozilla Firefox, Firefox ESR and Thunderbird are vulnerable to man-in-the-middle attacks. A remote attacker can spoof add-on updates and obtain confidential information via leveraging possession of X.509 server certificates...

Buffer Over-Read

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

DEBIAN-CVE-2019-9795

A vulnerability where type-confusion in the IonMonkey just-in-time JIT compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...