Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...

Mozilla Firefox 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow

Binary data 6325.prm...

Mozilla Products Multiple Unspecified Vulnerabilities - Feb12 (MAC OS X 01)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmacosx01feb12.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Multiple Unspecified Vulnerabilities - Feb12 MAC OS X 01 Authors:...

Fedora 15 : firefox-7.0-1.fc15 / gnome-python2-extras-2.25.3-35.fc15 / mozvoikko-1.9.0-8.fc15 / etc (2011-13465)

Update to new upstream Firefox version 7.0, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/fi refox.htmlfirefox7 This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox...

Firefox 3.6 < 3.6.18 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is 3.6.x earlier than 3.6.18. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365 -...

Firefox Version 5 release with fix of 5 remote code vulnerabilities

Firefox Version 5 release with fix of 5remote code vulnerabilities Mozilla Delivers New Version of Firefox – First Web Browser to Support Do Not Track on Multiple Platforms Mozilla delivered two things today: Firefox 5 for personal computers and Android phones, and the promise to complete the new...

Firefox 3.6 < 3.6.18 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.18. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365 - A...

Firefox 3.6 < 3.6.17 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.17. Such versions are potentially affected by the following security issues : - Multiple use-after-free errors exist in the handling of the object attributes 'mChannel', 'mObserverList' and 'nsTreeRange'. CVE-2011-0065, CVE-2011-0066,...

Firefox 3.6 < 3.6.13 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.13. Such versions are potentially affected by multiple vulnerabilities : - Multiple memory corruption issues could lead to arbitrary code execution. MFSA 2010-74 - On the Windows platform, when 'document.write' is called with a very long...

Mozilla Firefox Information Disclosure Vulnerability (Windows)

The host is installed with Mozilla Firefox and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxinfodiscvulnwin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mozilla Firefox Information Disclosure Vulnerability Windows Authors: Madhuri D Copyright:...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Firefox 3.6 < 3.6.9 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.9. Such versions are potentially affected by the following security issues : - The pseudo-random number generator is only seeded once per browsing session and 'Math.random' may be used to recover the seed value allowing the browser instance...

Mozilla Firefox 3.6.8 - 'dwmapi.dll' DLL Hijacking

/ Exploit Title: Firefox define DllExport declspec dllexport DllExport void CPAcquireContext pwn; DllExport void DWMAPI100 pwn; DllExport void DWMAPI101 pwn; DllExport void DwmEnableComposition pwn; DllExport void DWMAPI103 pwn; DllExport void DWMAPI104 pwn; DllExport void DWMAPI105 pwn; DllExpor...

Mozilla Products Multiple Vulnerabilitie july-10 (Windows)

The host is installed with Mozilla Firefox/Seamonkey that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwin01jul10.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilitie july-10 Windows Authors: Antu Sanadi Copyright: Copyrig...

Firefox 3.6.7 Remote Code Execution

The installed version of Firefox is 3.6.7. This version is potentially affected by a memory corruption vulnerability that could lead to arbitrary code execution. MFSA 2010-48 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47829; scriptversion"1.11";...

Mozilla arbitrary free flaw

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted HTML document, related to the DATA and...

Mozilla Freed object reuse across plugin instances

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances...

Content-Disposition: attachment ignored if Content-Type: multipart also present

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting XSS...

Mozilla Firefox Address Bar Spoofing Vulnerability june-10 (Windows)

The host is installed with Mozilla Firefox and is prone to spoofing vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxspoofingvulnwinjun10.nasl 5394 2017-02-22 09:22:42Z teissa $ Mozilla Firefox Address Bar Spoofing Vulnerability june-10 Windows Authors: Antu Sanadi Copyright:...

Mozilla Firefox Multiple Unspecified Vulnerabilities june-10 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultunspecifiedvulnwin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mozilla Firefox Multiple Unspecified Vulnerabilities june-10 Windows Authors: Antu...