Mozilla Firefox ESR < 68.4.1

The version of Firefox ESR installed on the remote Windows host is prior to 68.4.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-03 advisory. - Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are...

Mozilla Firefox < 72.0.1

The version of Firefox installed on the remote Windows host is prior to 72.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-03 advisory. - Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware ...

Mozilla Firefox ESR < 68.4.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 68.4.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-03 advisory. - Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion...

Mozilla Firefox ESR < 68.4

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 68.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-02 advisory. - Mozilla developers Jason Kratzer, Christian Holler, and Bob Clary reported memory safety bugs present in...

Mozilla Firefox Security Restriction Bypass Vulnerability (CNVD-2020-02974)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 72. An attacker could exploit the vulnerability to bypass security restrictions...

Mozilla Firefox Memory Corruption Vulnerability (CNVD-2020-02973)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 71. An attacker can exploit the vulnerability to corrupt memory and potentially execute arbitrary code...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2020-02152)

Mozilla Firefox is an open source web browser. A denial of service vulnerability exists in Mozilla Firefox. An attacker can crash/hang a remote user's browser by sending a crafted URL...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-01174)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 72. The vulnerability can be exploited by an attacker to obtain sensitive information when using untraceable browsing...

Mozilla Firefox and Firefox ESR CVE-2019-17026 Type Confusion Remote Code Execution Vulnerability

Description Mozilla Firefox and Firefox ESR are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the application. Technologies Affected Mozilla Firefox 0.1 Mozilla Firefox 0.10.0 Mozilla Firefox 0.10.1 Mozilla Firefox 0...

Mozilla Firefox < 72.0.1 Type Confusion (mfsa2020-03)

Binary data 701257.prm...

Mozilla Firefox < 72.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 72.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-03 advisory. - Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We...

Mozilla Firefox Security Advisories (MFSA2020-01, MFSA2020-02) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

KLA11630 Type confusion vulnerability in Mozilla Firefox

Type confusion vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to cause denial of service. Original advisories mfsa2020-03 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related products...

KLA11631 Type confusion vulnerability in Mozilla Firefox ESR

Type confusion vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories mfsa2020-03 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related produc...

The Curious Case of WebCrypto Diffie-Hellman on Firefox - Small Subgroups Key Recovery Attack on DH

tl;dr Mozilla Firefox prior to version 72 suffers from Small Subgroups Key Recovery Attack on DH in the WebCrypto 's API. The Firefox's team fixed the issue removing completely support for DH over finite fields that is not in the WebCrypto standard. If you find this interesting read further below...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.4.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2020-01142)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A denial of service vulnerability exists in Mozilla Firefox. It allows attackers to send specially constructed URLs that crash/hang a remote user's browser...

Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities

Description Mozilla Firefox and Firefox ESR are prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions, obtain sensitive information and bypass certain security restrictions and perform unauthorized actions. This may aid in further...

Mozilla Firefox and Firefox ESR CVE-2019-17024 Remote Security Vulnerability

Description Mozilla Firefox and Firefox ESR are prone to a remote security vulnerability. Attackers can exploit this issue to execute arbitrary code or cause denial-of-service conditions. This may aid in further attacks. This issue is fixed in: Firefox 72 Firefox ESR 68.4 Technologies Affected...

Mozilla Firefox and Firefox ESR CVE-2019-17015 Memory Corruption Vulnerability

Description Mozilla Firefox and Firefox ESR are prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. This issue is fixed in:...