DEBIAN-CVE-2019-5849

Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

CVE-2018-5095

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to trigger a service failure.

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

NewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0011)

The remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough...

NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0124)

The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough...

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0052)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. CVE-2016-5824 - A use-after-free...

Mozilla Firefox ESR < 60.7 Multiple Vulnerabilities

Binary data 700733.prm...

Security vulnerabilities fixed in Thunderbird 60.7 — Mozilla

If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main...

Security vulnerabilities fixed in Firefox ESR 60.7 — Mozilla

If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main...

Denial Of Service (DoS)

firefox/thunderbird is vulnerable to denial of service. An integer overflow vulnerability in the Skia library can occur after specific transform operations, leading to a potentially exploitable crash...

Arbitrary Code Execution

firefox/thunderbird is vulnerable to arbitrary code execution. A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a arbitrary code execution and an exploitable crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service DoS attacks. The vulnerability exists due to the use of 32-bit calculations instead of 64-bit during buffer offset calculations with hardware accelerated canvas 2D actions in Skia library of Firefox application resulting in an application crash...

Out-of-bound Writes

Google Chrome is vulnerable to out of bound writes attacks. This is because a precision error in Skia library which allows a remote attacker to perform an out of bounds memory write via a crafted HTML page result in denial of service conditions...

Memory Corruption

Firefox is vulnerable to memory corruption attacks. This occurs in the Skia library during graphic operations. An attacker could use this flaw to cause denial of service conditions...

Integer Overflow

Firefox is vulnerable to integer overflow vulnerability. This occurs in the Skia library when allocating memory for edge builders. An attacker could cause a potentially exploitable crash resulting a denial of service condition...

Security Bulletin: Mozilla Firefox vulnerability in IBM SONAS (CVE-2019-5785)

Summary There is a security vulnerability in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.10 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions of...

The vulnerability of the Skia library used by web browsers Firefox, Firefox ESR, and the email processing program Thunderbird, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability of the Skia library used in web browsers such as Firefox, Firefox ESR, and the email processing program Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to cause service interruptions...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:0871-1)

This update for MozillaFirefox to version ESR 60.6.1 fixes the following issues : Security issuess addressed : update to Firefox ESR 60.6.1 bsc1130262 : CVE-2019-9813: Fixed Ionmonkey type confusion with proto mutations CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information Update...

Mozilla Firefox < 65.0.1 Multiple Vulnerabilities

Binary data 700486.prm...

OPENSUSE-SU-2019:0248-1 Security update for MozillaFirefox

This update for MozillaFirefox to version 60.5.1esr fixes the following issues: Security vulnerabilities addressed MFSA-2019-05, boo1125330: - CVE-2018-18356: Fixed a use-after-free vulnerability in the Skia library that could occur when creating a path, leading to a potentially exploitable crash...