CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 安定版のFileReader UaFエクスプロイト Windows 7 x86向け このエクスプロイトは、サイト分離を利用して脆弱性をブルートフォースします。iframe.htmlはラッパースクリプトであり、他のファイルに含まれるエクスプロイトを繰り返しiframeにロードします。 一方のサイトにiframe.htmlをホストし、もう一方にexploit.html、exploit.js、wokrer.jsをホストします。iframe.htmlの13行目をexploit.htmlのURLに変更してください。...

MiracleLinux 9 : firefox-102.11.0-2.el9.ML.1 (AXSA:2023-6024:19)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6024:19 advisory. Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver CVE-2023-32206 Mozilla: Potential...

EUVD-2016-3052

Malware in sbrugna...

Simple College Website 1.0 SQL Injection / Code Execution

============================================================================================================================================= | Title : Simple College Website 1.0 WYSIWYG Settings Management Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

Memory Corruption

firefox is vulnerable to Memory Corruption. The vulnerability is due to uninitialised data in the file read limit which is passed to the FileReader::DoReadData method, resulting memory corruption...

The vulnerability of the FileReader::DoReadData() function in browsers like Firefox and Firefox ESR, as well as in the email client Thunderbird, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the FileReader::DoReadData function in browsers like Firefox and Firefox ESR, as well as in the email client Thunderbird, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

RLSA-2023:3220 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fixes: Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver...

RHEL 8 : firefox (RHSA-2023:3220)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3220 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

ALSA-2023:3220 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fixes: Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver...

RHEL 8 : thunderbird (RHSA-2023:3221)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3221 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.11.0. Security Fixes: Mozilla...

RHEL 7 : thunderbird (RHSA-2023:3151)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3151 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.11.0. Security Fixes: Mozilla...

RHEL 9 : thunderbird (RHSA-2023:3150)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3150 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.11.0. Security Fixes: Mozilla...

Mozilla: Potential memory corruption in FileReader::DoReadData()

The Mozilla Foundation Security Advisory describes this flaw as: When reading a file, an uninitialized value could have been used as read limit...

Updated thunderbird packages fix security vulnerability

Browser prompts could have been obscured by popups. CVE-2023-32205 Crash in RLBox Expat driver. CVE-2023-32206 Potential permissions request bypass via clickjacking. CVE-2023-32207 Content process crash due to invalid wasm code. CVE-2023-32211 Potential spoof due to obscured address bar...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fixes: Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver...

ALSA-2023:3150 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.11.0. Security Fixes: Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver CVE-2023-32206 Mozilla: Potential permissions reques...

Mozilla Thunderbird Security Advisories (MFSA2023-18) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

PT-2023-2858

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 113 Firefox ESR versions prior to 102.11 Thunderbird versions prior to 102.11 Description The issue is related to a buffer overflow in the FileReader::DoReadData function, which can be exploited by a remote attacker t...

OSV-2020-1842 Heap-buffer-overflow in parquet::arrow::SchemaManifest::Make

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25933 Crash type: Heap-buffer-overflow READ 8 Crash state: parquet::arrow::SchemaManifest::Make parquet::arrow::FileReader::Make parquet::arrow::internal::FuzzReader...

GHSA-C2GP-86P4-5935 Use-After-Free in puppeteer

Versions of puppeteer prior to 1.13.0 are vulnerable to the Use-After-Free vulnerability in Chromium CVE-2019-5786. The Chromium FileReader API is vulnerable to Use-After-Free which may lead to Remote Code Execution. Recommendation Upgrade to version 1.13.0 or later...