Mozilla Firefox, Mozilla Firefox ESR and Mozilla Thunderbird Denial of Service Vulnerabilities

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

Mozilla: Ionmonkey type confusion with __proto__ mutations

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

DEBIAN-CVE-2019-9788

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...

Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time JIT compiler and when the constructor function is entered through on-stack replacement OSR. This allows for possible arbitrary...

Mozilla: Use-after-free with SMIL animation controller

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2019-08521)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox E...

Mozilla Firefox and Firefox ESR SMIL animation controller memory misreference vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A memory misreference vulnerability exists in the SMIL animation controller in...

Mozilla Firefox and Firefox ESR Memory Corruption Vulnerability (CNVD-2019-08523)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox version 65 and Firefox ESR version 60.5. A...

Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...

Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...

Mozilla Firefox, Firefox ESR and Thunderbird Information Disclosure Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is email client software that supports IMAP, POP mail protocols, and the HTML mail format. A security vulnerability...

Mozilla Firefox and Firefox ESR integer overflow vulnerability (CNVD-2019-05571)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. An integer overflow vulnerability exists in Mozilla Firefox ESR versions prior to 60.5.1 and Ski...

Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects...

Mozilla Firefox and Firefox ESR Memory Corruption Vulnerability (CNVD-2019-05563)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox and Firefox ESR. An attacker could exploit the...

Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the lz4::decompress function in the Graphite library of Mozilla Firefox and Mozilla Firefox ESR browsers is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Mozilla Firefox and Firefox ESR integer overflow vulnerability (CNVD-2018-25865)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox version 63 and Firefox ESR version 60.3. An...

The vulnerability of the IndexedDB component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to execute arbitrary code or cause the application to crash.

The vulnerability of IndexedDB in Firefox web browsers and Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause the application to crash remotely...

The vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after it is freed, allows an attacker to execute arbitrary code or cause the application to crash.

The vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause the application to crash remotely...