Vulnerability of Firefox ESR and Firefox web browsers, as well as the Thunderbird email client, relates to the execution of operations beyond the buffer in memory, allowing attackers to trigger a service failure.

The vulnerability in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

U.S. Dept Of Defense: Reflected XSS in https://www.██████/

Hello Security Team, I would like to report the XSS vulnerability on your system. The i= parameter is not escaped properly for URL encoded values. Steps To Reproduce: Visit the following POC link:...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2020-43766)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in WebRTC VideoBroadcaster in versions of Mozilla Firefox prior to 78. An attacker can exploit this vulnerability to cause memory corruption and possibl...

expat: Integer overflow leading to buffer overflow in XML_GetBuffer()

Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283...

VA VD 1912 CU1 : Firefox browser unable to detect workspace 1912

Firefox browser does not automatically detect Citrix Workspace...

CVE-2020-12389

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

CVE-2020-6831

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR 68.8, Firefox 76, and Thunderbird 68.8.0...

Mozilla Firefox and Firefox ESR Input Validation Error Vulnerability (CNVD-2020-34653)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.8 an...

Mozilla Thunderbird, Firefox ESR and Firefox Competitive Conditions Issue Vulnerabilities

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

The vulnerability of the HelloRetryRequest extension in the Firefox browser allows a perpetrator to compromise data integrity.

The vulnerability of the HelloRetryRequest extension in the Firefox browser is related to an error in packet sending. In this error, the client may negotiate a protocol that is lower in level than TLS 1.3. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

Mozilla Thunderbird, Firefox ESR and Firefox Stack Buffer Overflow Vulnerabilities

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

The vulnerability of the nested workers mechanism in browsers Firefox, Firefox ESR, and the email client Thunderbird lies in the use of memory areas after they are freed. This allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the nested worker mechanism in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures...

The vulnerability of Firefox browser, related to copying buffers without checking the size of the input data, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the Firefox browser is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...

The vulnerability of Firefox browser, related to insufficient verification of data authenticity, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

The vulnerability of Firefox browser, related to improper data initialization, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to improper data initialization. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

The vulnerability of Firefox browser, related to the improper assignment of access rights for critical resources, allows attackers to gain unauthorized access to information.

The vulnerability of Firefox browsers is related to the improper assignment of access rights for critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...

The vulnerability of the Spidermonkey component in Firefox and Firefox ESR web browsers allows a hacker to trigger a service failure.

The vulnerability of the Spidermonkey component in Firefox and Firefox ESR browsers is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the “Click to Play” request in the Firefox web browser allows a perpetrator to compromise data integrity.

The vulnerability of the “Click to Play” request in the Firefox web browser is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of Firefox browser, related to insufficient validation of input data, allows attackers to compromise the integrity of data.

The vulnerability of Firefox is related to a security policy error. This error does not apply to the content of XSL stylesheets, provided that the XML file complies with security policies and contains an XSL stylesheet. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers is related to an error in the operation of moving operations beyond the buffer. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause service failures...