60 matches found
Security fix for the ALT Linux 10 package firefox-esr version 45.9.0-alt1
April 20, 2017 Andrey Cherepanov 45.9.0-alt1 - New ESR version - Security fixes: + CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, + CVE-2017-5462: DRBG flaw in NSS + CVE-2017-5445: Uninitialized values used while parsing + CVE-2017-5469: Potential Buffer overflow in...
Security vulnerabilities fixed in Firefox ESR 52.1 — Mozilla
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. A use-after-free vulnerability occurs during transaction processing in t...
The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this feature after release in the RefreshDriverTimer::TickDriver function of the SMIL animation controller in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors operating remotely to execute arbitrary code or cause service failures errors related to dynamic memory...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this feature after release in the RefreshDriverTimer::TickDriver function of the SMIL animation controller in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when dealing with dynamic memory. This is done by using...
SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0824-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:0858-1)
MozillaThunderbird was updated to version 24.6.0 to fix six security issues : - Miscellaneous memory safety hazards CVE-2014-1533/CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 - Use-after-free with SMIL Animation...
openSUSE Security Update : seamonkey (openSUSE-SU-2014:0855-1)
seamonkey was updated to version 2.26.1 to fix nine security issues. These security issues were fixed : - Miscellaneous memory safety hazards CVE-2014-1533/CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 -...
SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9370)
Mozilla Firefox was updated to version 24.6.0 to fix six security issues : - Miscellaneous memory safety hazards. CVE-2014-1533 / CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer. CVE-2014-1536 / CVE-2014-1537 / CVE-2014-1538 - Use-after-free with SMIL Animati...
Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2250-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2250-1 advisory. Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden and Kyle Huey discovered multiple memory...
Mozilla updates 2014/06 (critical)
These updates contain the latest security and maintenance updates for - Mozilla Firefox 24.6esr - Mozilla Thunderbird 24.6 - Mozilla NSPR is also updated to 4.10.6 to fix MFSA 2014-48/CVE-2014-1533/CVE-2014-1534 Miscellaneous memory safety hazards MFSA...
USN-2243-1 firefox vulnerabilities
Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner, Benoit Jacob and Karl Tomlinson discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted...
Design/Logic Flaw
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
Mozilla Thunderbird < 24.6 Multiple Vulnerabilities
Binary data 8292.prm...
UBUNTU-CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
Mozilla: Use-after-free with SMIL Animation Controller (MFSA 2014-52)
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
Use-after-free with SMIL Animation Controller — Mozilla
Security researcher Nils used the Address Sanitizer to discover a use-after-free problem with the SMIL Animation Controller when interacting with and rendering improperly formed web content. This causes a potentially exploitable crash...