7192 matches found
DSA-4199-1 firefox-esr - security update
Bulletin has no description...
Security fix for the ALT Linux 10 package firefox-esr version 52.8.0-alt1
May 9, 2018 Andrey Cherepanov 52.8.0-alt1 - New ESR version 52.8.0. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5154 Use-after-free with SVG animations and clip paths + CVE-2018-5155 Use-after-free with SVG animations and text paths + CVE-2018-5157 Same-origin...
Debian: Security Advisory (DSA-4199-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Releases Security Updates for Firefox
Mozilla has released security updates to address vulnerabilities in Firefox ESR and Firefox. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Mozilla Security Advisories for Firefox ESR 52.8 and...
KLA11246 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, execute arbitrary code, perform XSS attacks and bypass security restrictions. Below is a complete list ...
Security vulnerabilities fixed in Firefox ESR 52.8 — Mozilla
Mozilla developers backported selected changes in the Skia library to the ESR52 branch of Firefox. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. A use-after-free vulnerability can occur while enumerating attributes during SVG...
Mozilla Firefox ESR memory corruption vulnerability (CNVD-2018-09766)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox ESR versions prior to 52.7. A remote attacker can exploit this vulnerability to execute arbitrary...
Mozilla Firefox ESR < 52.7.3
The version of Firefox ESR installed on the remote Windows host is prior to 52.7.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used...
Debian DLA-1321-1 : firefox-esr security update
Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 'Wheezy', these problems have been fixed in version 52.7.3esr-1deb7u1. We recommend that you upgrade your firefox-esr...
Debian DSA-4153-1 : firefox-esr - security update
It was discovered that a use-after-free in the compositor of Firefox can result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4153. The text itself is copyright C Softwar...
[SECURITY] [DLA 1321-1] firefox-esr security update
Package : firefox-esr Version : 52.7.3esr-1deb7u1 CVE ID : CVE-2018-5148 Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 "Wheezy", these problems have been fixed in...
[SECURITY] [DSA 4153-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4153-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2018 https://www.debian.org/security/faq -...
CVE-2018-5148
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...
UBUNTU-CVE-2018-5148
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...
Debian: Security Advisory (DLA-1321-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-1321-1 firefox-esr - security update
Bulletin has no description...
DSA-4153-1 firefox-esr - security update
Bulletin has no description...
DLA-1319-1 firefox-esr - security update
Bulletin has no description...
[SECURITY] [DLA 1319-1] firefox-esr security update
Package : firefox-esr Version : 52.7.2esr-1deb7u1 CVE ID : CVE-2018-5146 CVE-2018-5147 Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code. For Debian 7 "Wheezy", these problems have been...