Amazon Linux 2 : thunderbird (ALAS-2019-1168)

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

CVE-2018-18493

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

CVE-2018-18493

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

Buffer overflow

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

CVE-2018-18493

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

CVE-2018-18493

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

EUVD-2018-10218

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, an...

CVE-2018-18493

CVE-2018-18493 describes a buffer overflow in the Skia library used for hardware-accelerated 2D canvas, caused by 32-bit offset calculations where 64-bit calculations were needed. Affected products include Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox

openSUSE Security Update : MozillaFirefox (openSUSE-2019-248)

This update for MozillaFirefox to version 60.5.1esr fixes the following issues : Security vulnerabilities addressed MFSA-2019-05, boo1125330 : - CVE-2018-18356: Fixed a use-after-free vulnerability in the Skia library that could occur when creating a path, leading to a potentially exploitable...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2019:0248-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2019:0248-1 Rating: important References: 1125330 Cross-References: CVE-2018-18356 CVE-2019-5785 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Mozilla Thunderbird < 60.5.1

The version of Thunderbird installed on the remote Windows host is prior to 60.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-06 advisory. - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially...

Mozilla Thunderbird < 60.5.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 60.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-06 advisory. - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a...

openSUSE Security Update : MozillaFirefox (openSUSE-2019-202)

This update for MozillaFirefox to version 60.5.1 fixes the following issues : Security issues fixed bsc1125330 : - CVE-2018-18356: Fixed a use-after-free vulnerability in Skia library. - CVE-2019-5785: Fixed an integer overflow in the Skia library. - CVE-2018-18335: Fixed a buffer overflow in Ski...

Mozilla Thunderbird Security Advisory (MFSA2019-06) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2019:0202-1 Rating: important References: 1125330 Cross-References: CVE-2018-18335 CVE-2018-18356 CVE-2019-5785 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

Updated firefox packages fix security vulnerability

A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitable crash CVE-2018-18356. An integer overflow vulnerability in the Skia library can occur after specific transform operations, leading to a potentially exploitable crash CVE-2019-57...

MGASA-2019-0089 Updated firefox packages fix security vulnerability

A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitable crash CVE-2018-18356. An integer overflow vulnerability in the Skia library can occur after specific transform operations, leading to a potentially exploitable crash CVE-2019-57...

Mozilla Firefox < 65.0.1

The version of Firefox installed on the remote Windows host is prior to 65.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-04 advisory. - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitab...

Mozilla Firefox ESR < 60.5.1

The version of Firefox ESR installed on the remote Windows host is prior to 60.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-05 advisory. - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially...