Firefox ESR Data Compromise

The vulnerability in Mozilla Firefox ESR allows malicious actors to execute arbitrary code using specially crafted WebGL content, created with the Cesium JavaScript library...

Firefox ESR Privilege Escalation

The Mozilla Firefox ESR browser contains a vulnerability that can be exploited when working with mar-files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar-files during updates...

Firefox ESR Code Execution

The Mozilla Firefox ESR browser contains a vulnerability related to errors occurring when memory is used after it is freed in the imgRequestProxy function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using values of the content types from the image data...

Firefox ESR Code Execution

Mozilla Firefox ESR’s software contains a vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by manipulating the imgLoader object during image resizing operations...

Firefox ESR Code Execution

The vulnerability of Firefox and Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using WebGL content...

Mozilla Firefox and Firefox ESR ANGLE Denial of Service Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox.Google ANGLE Almost Native Graphics Google ANGLE Almost Native Graphics Layer Engine is a graphics...

Mozilla Firefox and Firefox ESR Privilege Gain Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A privilege-acquisition vulnerability exists in the maintenance service of Mozilla Firefox versio...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2016-03990)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 47 and Firefox ES...

Mozilla Firefox and Firefox ESR Buffer Overflow Vulnerability (CNVD-2016-03987)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A buffer overflow vulnerability exists in Mozilla Firefox versions prior to 47 and Firefox ESR...

Firefox ESR Code Execution

The vulnerability of the stagefright::SampleTable::parseSampleCencInfo function in the libstagefright component of Firefox and Firefox ESR browsers is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by manipulating CENC...

Flash Player Code Execution

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

Flash Player Code Execution

The vulnerability of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firefox ESR and Firefox DoS

The vulnerability of the graphite2::vm::Machine::Code::Code function in browsers Firefox ESR and Firefox, as well as in the Graphite 2 rendering software, is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions or other...

Flash Player Code Execution

The vulnerability of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Flash Player Code Execution

The vulnerability of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Flash Player Code Execution

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by a numerical overflow. Exploiting these vulnerabilities allows an attacker operating remotely to execute arbitrary code...

Flash Player Code Execution

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

Flash Player Code Execution

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite...

DEBIAN-CVE-2016-1977

The Machine::Code::decoder::analysis::setref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a crafted Graphite smart font...