The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird lies in improper restrictions on operations within memory buffers, allowing attackers to execute arbitrary memory writes.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to improper restrictions on operations within memory buffers. Exploiting these vulnerabilities can allow a remote attacker to perform arbitrary memory writes by improperly handling th...

SUSE-SU-2023:0763-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 102.9.0 ESR bsc1209173: - CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android - CVE-2023-25748: Fullscreen Notification could have been hidden by window prompts on Android -...

[SECURITY] [DSA 5374-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5374-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 15, 2023 https://www.debian.org/security/faq -...

SUSE CVE-2023-25752

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which originates from a redirection to a Web extension file that could lead to the disclosure of a local path...

Slackware: Security Advisory (SSA:2023-073-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which originates from the possibility of opening third-party applications without prompting...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which stems from a fixed memory security hole...

CVE-2023-25751

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which originates from a download pop-up window that may hide full-screen notifications...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-102.9.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

SUSE-SU-2023:0728-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 102.9.0 ESR bsc1209173: - CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android - CVE-2023-25748: Fullscreen Notification could have been hidden by window prompts on Android -...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111. An attacker can exploit the vulnerability to parse a file containing the name of an environment variable in the current user's environmen...

Mozilla Firefox < 111.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 111.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-09 advisory. - Mozilla developers and community members Calixte Denizet, Gabriele Svelto, Andrew McCreight, and the Mozilla...

Mozilla Firefox ESR < 102.9

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 102.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-10 advisory. - Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 111, which stems from an issue in Firefox when accessing restricted streams requires checking that the number of available bytes is i...

KLA48551 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in JIT...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111. Attackers have exploited the vulnerability to cause user confusion and website spoofing attacks...

Mozilla Firefox 代码问题漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which stems from the fact that when implementing AudioWorklets, certain code may have converted one type to another invalid dynamic type...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2023-073-01)

The version of mozilla-firefox installed on the remote host is prior to 102.9.0esr / 111.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-073-01 advisory. - Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be...