282 matches found
CVE-2018-5154
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0103)
The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities: - A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR...
Use After Free
Firefox is vulnerable to use-after-free attacks. This occurs when adjusting layout during SVG animations with text paths which leads to potentially exploitable crash...
Use After Free
mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs while enumerating attributes during SVG animations with clip paths leading to application crashes...
Denial Of Service
Thunderbird, Firefox ESR, and Firefox are vulnerable to denial of service attacks. A remote attacker could crash the system during bidirectional unicode manipulation with CSS animations leading to denial of service conditions...
User-After-Free
firefox is vulnerable touse-after-free vulnerability. The vulnerability exists in the nsFrameManager::CaptureFrameState function and remote attackers can execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation...
openSUSE Security Update : Mozilla Thunderbird (openSUSE-2019-364)
This update for Mozilla Thunderbird to version 52.8 fixes the following issues : Security issues fixed MFSA 2018-13, boo1092548 : - CVE-2018-5183: Backport critical security fixes in Skia - CVE-2018-5154: Use-after-free with SVG animations and clip paths - CVE-2018-5155: Use-after-free with SVG...
SUSE-SU-2018:1334-2 Security update for MozillaFirefox
This update for MozillaFirefox to the ESR 52.8 release fixes the following issues: Mozil to Firefox ESR 52.8 bsc1092548 Security issues fixed: - MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF...
Mozilla Firefox ESR < 52.8 Multiple Vulnerabilities
Binary data 700337.prm...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
Design/Logic Flaw
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
CVE-2018-14955
CVE-2018-14955 affects SquirrelMail prior to 1.4.23; the mail display page (through 1.4.22) is vulnerable to XSS via SVG animations (animate to attribute). Debian reports a fixed package at squirrelmail 2:1.4.23~svn20120406-2+deb8u3; other disclosures note unpatched status in some distros (e.g., ...
CVE-2018-5154
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...
CVE-2018-5155
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...
CVE-2018-5154
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...
CVE-2018-5155
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...
DEBIAN-CVE-2018-5154
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...