[SECURITY] Fedora 38 Update: firefox-118.0-1.fc38

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 39 Update: firefox-118.0-1.fc39

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox < 118.0.1

The version of Firefox installed on the remote Windows host is prior to 118.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2023-271-01)

The version of mozilla-firefox installed on the remote host is prior to 115.3.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-271-01 advisory. - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a...

Mozilla Firefox ESR < 115.3.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process...

Mozilla Firefox < 118.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 118.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content...

KLA60820 DoS vulnerability in Mozilla Firefox

Heap buffer overflow vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2023-44 Exploitation Public exploits exist for this vulnerability. Related products Mozilla-Firefox CVE list CVE-2023-5217 critical...

SUSE-SU-2023:3837-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR MFSA 2023-42, bsc1215575: Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 bmo1846683. - CVE-2023-5169: Out-of-bounds write in PathOps bmo1846685. - CVE-2023-517...

Mozilla Firefox JIT Boolean Conversion Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation...

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that stems from a memory leak in the presence of a privileged process...

Mozilla Firefox Buffer Error Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox, which stems from an out-of-bounds write vulnerability in PathRecording...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a memory corruption vulnerability that can be exploited by a remote attacker to submit a special Web request that can be tricked into being parsed by the user, which can...

Mozilla Firefox Input Validation Error Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox, which originates from an out-of-bounds write vulnerability in HTTP Alternate Services...

Mozilla Firefox ESR Security Advisories (MFSA2023-41, MFSA2023-43)- Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Slackware: Security Advisory (SSA:2023-269-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Resource Management Error Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox, which originates from a post-release reuse vulnerability in Ion Compiler...

Mozilla Firefox ESR Security Advisories (MFSA2023-41, MFSA2023-43) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.3.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2023-269-01)

The version of mozilla-firefox installed on the remote host is prior to 115.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-269-01 advisory. - A compromised content process could have provided malicious data to FilterNodeD2D1 resulting in an...

KLA60812 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in PathOps can be exploited...