CVE-2015-4519

CVE-2015-4519 affects Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3. A crafted JavaScript sequence after dragging an image into a TEXTBOX can bypass access restrictions and disclose the redirect’s target URL (information disclosure). The issue is triggered via user-assisted interac...

CVE-2015-4522

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

CVE-2015-4500

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Firefox ESR < 38.3 Multiple Vulnerabilities

The version of Firefox ESR installed on the remote Windows host is prior to 38.3. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to...

Mozilla Releases Security Updates for Firefox

The Mozilla Foundation has released security updates to address critical vulnerabilities in Firefox and Firefox ESR. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: Firefox 41 Firefox ESR 38.3 US-CERT...

PT-2015-2167

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3 Description The issue is related to insufficient access control to files in the updater.exe component of Firefox and Firefox ESR browsers. This can be exploited by a loc...

KLA10672 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, spoof user interface, impact local files, execute arbitrary code or obtain sensitive information. Below...

The vulnerability of Firefox and Firefox ESR browsers allows attackers to trigger a service failure or increase their privileges.

The vulnerability of the Updater component in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability can allow an attacker acting locally to cause service failures or increase their privileges using a specially crafted MAR file...

Mozilla Firefox ESR Multiple Vulnerabilities (mfsa2015-94) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the StyleAnimationValue class StyleAnimationValue::operator in Firefox browsers, Firefox ESR, and the Firefox OS operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrit...

Firefox ESR < 38.2.1 Multiple Vulnerabilities (Mac OS X)

The version of Mozilla Firefox ESR installed on the remote Mac OS X host is prior to 38.2.1. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists when handling restyling operations during the resizing of canvas elements due to the canvas references being...

Firefox ESR < 38.2.1 Multiple Vulnerabilities

The version of Mozilla Firefox ESR installed on the remote Windows host is prior to 38.2.1. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists when handling restyling operations during the resizing of canvas elements due to the canvas references being...

KLA10654 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities 1. Use-after-free vulnerability can be exploited remotely...

PT-2015-1966

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0.3 Firefox ESR versions prior to 38.2.1 Description The issue is related to the add-on installation feature, which allows remote attackers to bypass the intended user-confirmation requirement. This can be...

Mozilla Firefox and Firefox ESR Mozilla Maintenance Service Component Competitive Condition Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox.Mozilla Maintenance Service is one of the components of the silent upgrade program i.e., it...

CVE-2015-4491

Integer overflow in the makefiltertable function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of...

Design/Logic Flaw

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Design/Logic Flaw

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method...

CVE-2015-4482

CVE-2015-4482 affects Mozilla Firefox before 40.0 and Firefox ESR before 38.2, via the Updater’s MAR file handling. mar_read.c could allow a crafted MAR file name to cause an out-of-bounds write, enabling local privilege gain or a denial of service. In public documents, the remediation typically ...

CVE-2015-4486

CVE-2015-4486 affects Mozilla Firefox and Firefox ESR via a libvpx-based issue in WebM decoding (decrease_ref_count). The vulnerability can allow remote code execution or a denial of service through malformed WebM data, with the described impact of an out-of-bounds read. Affected products are Fir...