1718 matches found
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors...
UBUNTU-CVE-2015-4519
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...
Firefox ESR Code Execution
The vulnerability of the libstagefright library in Firefox and Firefox ESR browsers is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Firefox ESR RCE
Multiple vulnerabilities in the drivers of Firefox and Firefox ESR browsers, caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code or cause system failures remotely...
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...
Firefox ESR Auth Bypass
The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox ESR browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the behavior of the program using a specially crafted ZIP archive...
Firefox ESR Auth Bypass
The vulnerability of the nsZipArchive::BuildFileList function, which allows access to arbitrary memory cells, is related to code errors in Firefox ESR browsers. Exploiting this vulnerability could enable a malicious actor to manipulate the program’s behavior remotely by using a specially crafted...
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors...
KLA10626 Code execution vulnerability in Adobe Flash Player
Use-after-free and memory corruption vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via an unknown vectors. Original advisories Adobe advisory Exploitation Public...
PT-2016-1279 · Mozilla +5 · Firefox +9
Name of the Vulnerable Software and Affected Versions: Graphite 2 versions 1.2.4 and earlier Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions 38.x prior to 38.6.1 Thunderbird affected versions not specified Description: The issue is related to the TtfUtil:LocaLookup function in...
PT-2016-1826 · Mozilla +5 · Firefox Esr +5
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox ESR versions 38.x through 38.7 Description: The issue is caused by a buffer overflow in the browser engine, which can be exploited by a remote attacker to cause a denial of service, such as memory corruption and application...
Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via...
Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)
The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting XSS attacks, via a crafted web sit...
Debian Announces End of Security Support for IceApe
Developers at Debian today informed users still clinging to Iceape – an Internet suite modeled on old Mozilla code – that they are cutting the cord and will stop supplying the software with security updates. Iceape is more or less a Debian-branded hybrid of several community-driven entities,...
Debian DSA-2720-1 : icedove - several vulnerabilities
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of...
Debian Security Advisory DSA 2720-1 (icedove - several vulnerabilities)
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of...
Debian Security Advisory DSA 2699-1 (iceweasel - several vulnerabilities)
Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, missing input sanitising vulnerabilities, use-after-free vulnerabilities, buffer overflows and other programming errors may lead to the execution of arbitrary...