The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to deficiencies in access control, allows attackers to carry out spear-phishing attacks.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to carry out spear-phishing attacks remotely...

The vulnerability of the Mozilla Firefox browser, related to deficiencies in access control, allows a hacker to insert any arbitrary URI into the address bar or browser history.

The vulnerability of the Mozilla Firefox browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to specify arbitrary URIs in the address bar or browser history...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. An...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability caused by an unchecked return value in the TLS handshake code. An attacker can exploit the vulnerability to cause the NSS TLS method to...

SSO logon to Director fail via Edge/Chrome/Firefox

SSO logon to Director fail when accessing from outside of Director server computer via Edge/Chrome/Firefox. IE or IE mode works fine and any browser on Director server works fine User get "An internal error has occurred" error even if credential is manually input...

The vulnerability of Firefox browsers, including Firefox ESR, relates to information representation errors in the user interface, which allows attackers to carry out clickjacking attacks.

The vulnerability of Firefox browsers and Firefox ESR lies in information representation errors at the user interface level. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

SUSE CVE-2023-6857

When resolving a symlink, a race may occur where the buffer passed to readlink may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and...

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 121, which stems from allowing untrustworthy content to be displayed under the name of trusted content...

Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla: Using Selection API would copy contents into X11 primary selection.

The Mozilla Foundation Security Advisory describes this flaw as: When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. This bug only affects Firefox on X11. Other systems are unaffected...

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird, related to writing beyond the buffer limit, allows attackers to trigger a service failure.

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Rocky Linux 8 : firefox (RLSA-2022:6702)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6702 advisory. - When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead. This...

Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to insufficient warnings about dangerous actions, allowing a hacker to execute arbitrary code.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to insufficient warnings about dangerous actions. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code using specially crafted files with extensions .msix,...

The vulnerability affects the implementation of application software interfaces for 3D graphics in WebGL-based browsers like Firefox and Firefox ESR, as well as the Thunderbird email client. This vulnerability allows an attacker to trigger a service failure.

The vulnerability of the application programming interface for 3D graphics in WebGL browsers like Firefox and Firefox ESR, as well as the Thunderbird email client, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox process creation suffers from a two-release vulnerability, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing it, which can caus...

The vulnerability in the UpdateRegExpStatics function of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the UpdateRegExpStatics function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Mozilla: XLL file extensions were downloadable without warnings

The Mozilla Foundation Security Advisory describes this flaw as: Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox ESR is an open source web browser from the Mozilla Foundation. Mozilla Firefox ESR suffers from a memory corruption vulnerability that can be exploited by a remote attacker to submit a specially crafted WEB request, which can be tricked into being parsed by the user and can cause...

The vulnerability in the Firefox web browser relates to the insufficient elimination of certain elements in the request, which allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to insufficient elimination of certain elements in the request. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...