FreeBSD : Mozilla -- Spoofing issue (75b1251d-4305-11f1-a627-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 75b1251d-4305-11f1-a627-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2021080 reports: Spoofing issue in the DOM: Core & HTML...

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this feature after release in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox allows malicious actors working remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...

CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

CVE-2016-2821: Undefined Security Weakness

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

PT-2016-5224

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 47.0 Mozilla Firefox ESR 45.x versions prior to 45.2 Description The issue is related to a use-after-free vulnerability in the mozilla::dom::Element class. This occurs when contenteditable mode is enabled,...

CVE-2014-1565: Improper Restriction of Operations within the Bounds of a Memory Buffer

The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process...

PT-2014-1484

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 32.0 Mozilla Firefox ESR versions prior to 31.1 Thunderbird versions prior to 31.1 Description The issue exists in the mozilla::dom::AudioEventTimeline function within the Web Audio API implementation, due to...

CVE-2014-1537: Undefined Security Weakness

Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

PT-2014-1457

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 30.0 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to a use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function. This...

PT-2013-3355

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 Thunderbird versions prior to 24.0 SeaMonkey versions prior to 2.21 Description The issue involves a use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function. Thi...

Mozilla DOM attribute cloning remote code execution vulnerability

Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node wit...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

SLES9: Security update for Mozilla

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-venkman mozilla-cs mozilla mozilla-devel mozilla-hu mozilla-ja mozilla-mail mozilla-ko mozilla-dom-inspector mozilla-deat mozilla-irc For more...

SLES9: Security update for Mozilla suite

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-irc mozilla-calendar mozilla-dom-inspector mozilla mozilla-venkman mozilla-mail More details may also be found by searching for keyword 5013299 withi...

SLES9: Security update for Mozilla suite

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-hu mozilla-deat mozilla-mail mozilla-irc mozilla-dom-inspector mozilla-venkman mozilla-devel mozilla-calendar mozilla-cs mozilla For more information...

devhelp, mozilla security update

CentOS Errata and Security Advisory CESA-2006:0329 Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the...