VMware Fusion 8.x < 8.5.2 Drag-and-Drop Feature Arbitrary Code Execution (VMSA-2016-0019)

The version of VMware Fusion installed on the remote Mac OS X host is 8.x prior to 8.5.2. It is, therefore, affected by an arbitrary code execution vulnerability in the drag-and-drop feature due to an out-of-bounds memory access error. An attacker within the guest can exploit this to execute...

VMware Workstation 12.x < 12.5.2 Drag-and-Drop Feature Arbitrary Code Execution (VMSA-2016-0019) (Linux)

The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.2. It is, therefore, affected by an arbitrary code execution vulnerability in the drag-and-drop feature due to an out-of-bounds memory access error. An attacker within the guest can exploit this to execute...

Mozilla Firefox Sensitive Information Disclosure Vulnerability (CNVD-2016-08176)

Mozilla Firefox is an open source web browser. A vulnerability in Mozilla Firefox's handling of drag-and-drop operations can be exploited by remote attackers to construct a malicious web page that can be parsed to obtain full-pathname information...

Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3076-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3076-1 advisory. Atte Kettunen discovered an out-of-bounds read when handling certain Content Security Policy CSP directives in some circumstances. If a user...

CVE-2016-5279

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...

CVE-2016-5279

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...

UBUNTU-CVE-2016-5279

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...

Mozilla Firefox < 49.0 Multiple Vulnerabilities

The version of Mozilla Firefox installed on the remote Windows host is prior to 49.0. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists within file dom/security/nsCSPParser.cpp when handling content security policies CSP containing empty referrer...

[SECURITY] Fedora 25 Update: filezilla-3.21.0-1.fc25

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

The vulnerability of the Firefox browser, which allows a hacker to gain access to local files

The vulnerability of Firefox browsers is related to an improper limitation during the “drag-and-drop” operation for the file:URL object. Exploiting this vulnerability can allow a remote attacker to gain access to local files through a specially crafted website...

August 9, 2016 — KB3176492 (OS Build 10240.17071)

None None...

Mozilla Firefox Local File Access Vulnerability

Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly restrict drag-and-drop operations on file: URIs, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing to access local files...

CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

Code injection

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

CVE-2016-5266

CVE-2016-5266 affects Mozilla Firefox before 48.0. The vulnerability arises from Firefox not properly restricting drag-and-drop (dataTransfer) actions for file: URIs, allowing user-assisted attackers to access local files via a crafted web site. Multiple connected advisories confirm the issue and...

CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

UBUNTU-CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...