firefox: multiple issues

CVE-2016-1952 CVE-2016-1953 arbitrary code execution Mozilla developers fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough...

UBUNTU-CVE-2016-1960

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free by leveraging mishandling of end tags, as demonstrated by...

PT-2016-1457

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is caused by an integer underflow in the nsHtml5TreeBuilder class, which is part of the HTML5 string parser. This can be exploited by remote...

Use-after-free in HTML5 string parser — Mozilla

Security researcher ca0nguyen, working with HP's Zero Day Initiative, reported a use-after-free issue in the HTML5 string parser when parsing a particular set of table-related tags in a foreign fragment context such as SVG. This results in a potentially exploitable crash...

Tidy-html5 Remote Code Execution Vulnerability

tidy-html5 is HTACG HTML Tidy Advocacy Community Group development and maintenance of a set of HTML5 pages to provide standards support for HTML tools . A remote code execution vulnerability exists in tidy-html5. An attacker could use this vulnerability to execute arbitrary code in the context of...

Bye bye, Flash! Google to Ban Flash-based Advertising

Google had also joined the path of Apple, Facebook, and Youtube to kill the "Adobe Flash Player" by announcing that the company is banning Flash banner support from its Adwords Advertising platform. "To enhance the browsing experience for more people on more devices, the Google Display Network an...

SAP HANA 4 Cross Site Scripting

SAP Hana Cloud Platform Cockpit Cross site Scripting Vulnerabilities ======================================================================== Vender: SAP Product: SAP HANA CLoud Vulnerability Type: Cross site scripting Title: SAP Hana Cloud Cross scripting in User Display Name Details: SAP Hana...

PHPIPAM 1.1.010 - Multiple Vulnerabilities

PHPIPAM 1.1.010 - Multiple Vulnerabilities Exploit Title: PHPIPAM v1.1.010 Multiple Vulnerabilities Date: 04/01/2016 Author: Mickael Dorigny @ Synetis Vendor or Software Link: http://phpipam.net/ Version: 1.1.010 Category: Multiple Vulnerabilities Tested on : 1.1.010 PHPIPAM description :...

Adobe Flash Player Days Numbered

If there’s unanimity among security professionals in anything, it’s in their loathing of Adobe’s Flash Player. There’s yet to be an APT or exploit kit that hasn’t welcomed vulnerabilities in the development platform with open arms. And for all that misery tallied up in lost intellectual property...

Adobe to Kill 'FLASH', but by Just Renaming it as 'Adobe Animate CC'

Adobe is Finally Killing FLASH, but not actually. Adobe Flash made the Internet a better place with slick graphics, animation, games and applications, but it never stood a chance of surviving in the same world as HTML5. Of course, Flash has plagued with various stability and security issues, whic...

[SECURITY] Fedora 21 Update: icecat-38.3.0-10.fc21

GNUZilla Icecat is a fully-free fork of Mozilla Firefox. Four extensions are included to this version of IceCat: LibreJS 6.0.10.20150620 GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap. SpyBlock 2.6.9.0 Blocks privacy trackers while i...

[SECURITY] Fedora 22 Update: icecat-38.3.0-10.fc22

GNUZilla Icecat is a fully-free fork of Mozilla Firefox. Four extensions are included to this version of IceCat: LibreJS 6.0.10.20150620 GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap. SpyBlock 2.6.9.0 Blocks privacy trackers while i...

openSUSE Security Update : MozillaFirefox / mozilla-nspr / mozilla-nss / etc (openSUSE-2015-718)

Mozilla Firefox was updated to version 42.0, fixing bugs and security issues. Mozilla xulrunner was updated to xulrunner 38.4.0. SeaMonkey was updated to 2.39. New features in Mozilla Firefox : - Private Browsing with Tracking Protection blocks certain Web elements that could be used to record yo...

[SECURITY] Fedora 23 Update: icecat-38.3.0-10.fc23

GNUZilla Icecat is a fully-free fork of Mozilla Firefox. Four extensions are included to this version of IceCat: LibreJS 6.0.10.20150620 GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap. SpyBlock 2.6.9.0 Blocks privacy trackers while i...

BWAPP: a very easy to use vulnerability demo platform-vulnerability warning-the black bar safety net

BWAPP buggy web Application which is an integration of a variety of Common Vulnerabilities and the latest vulnerabilities in Open Source Web application that aims to help network security enthusiasts, developers and students to discover and prevent network vulnerabilities. Contains over 1 0 0...

Google to Pause Flash Ads in Chrome Starting Next Week

Google on Tuesday will begin pausing Flash ads by default in Chrome, a move that is designed mainly to help improve browser speed, but that will also be a security upgrade for users. The company announced the plan back in June and said this week that it will make the behavior the default setting...

Android Stagefright MP4 tx3g Integer Overflow

This module exploits an integer overflow vulnerability in the Stagefright Library libstagefright.so. The vulnerability occurs when parsing specially crafted MP4 files. While a wide variety of remote attack vectors exist, this particular exploit is designed to work within an HTML5 compliant browse...

Firefox temporarily shield the Flash, to avoid the user was hacked-vulnerability warning-the black bar safety net

! Hacking Team was attacked by hackers have been on the Adobe caused a serious impact. From Hacking Team leaks information that Adobe Flash Player there are two serious vulnerabilities. Since Adobe needs to spend some time to fix these vulnerabilities, so Mozilla decided for Firefox browser users...

Three pieces of Flash 0day vulnerability exposure, Flash again the emergency update-bug warning-the black bar safety net

Firefox developers in the latest version of the Firefox browser in the Flash Player Plug-In included in the shield list, which means that on the website all Flash content will be disabled and the user had to manually open the Flash. Adobe today released the latest 1 8. 0. 0. 2 0 9 version, has be...

The most beautiful flash vulnerability exposure, expert: relief of the IT-vulnerability warning-the black bar safety net

! Lei Feng network previously reported, the Italian hacking company Hacking Team is attacking, including source code, e-mail, including a 400GB file is public. Coincidentally, these are disclosed in the document there is a Adobe Flash 0-Day vulnerability, HT in the document referred to as“nearly...