Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CVE-2019-9810 Exploit for Firefox on Windows CVE-2019-9810 is...

Security Bulletin: Mozilla Firefox vulnerability in IBM SONAS (CVE-2019-5785)

Summary There is a security vulnerability in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.10 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions of...

Security Bulletin: Multiple Mozilla Firefox vulnerabilities in IBM SONAS

Summary There are security vulnerabilities in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.10 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions o...

Security Bulletin: Multiple Mozilla Firefox vulnerabilities in IBM SONAS

Summary There are security vulnerabilities in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.10 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions o...

Information Disclosure

Mozilla Firefox is vulnerable to information disclosure. A malicious page can extract pixel values from a targeted user using SVG filters that don't use the fixed point math implementation on a target iframe. An attacker could obtain history information and read text values across domains. This...

Arbitrary Code Execution

Mozilla Firefox is vulnerable to arbitrary code execution. Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it resulting a potentially exploitable crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts resulting a potentially exploitable crash...

Arbitrary Code Execution

Mozilla Firefox is vulnerable to arbitrary code execution attacks. This is because the JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs when flushing and resizing layout because the "PressShell" object has been freed while still in use which results in a potentially exploitable crash during these operations...

Out Of Bound Reads (OOB)

Mozilla Firefox is vulnerable to out of bound reads. This vulnerability exists due to an assertion error in graphite2. An attacker could possibly exploit this flaw to cause an application crash...

Uninitialized Buffer Allocation

Mozilla Firefox is vulnerable to uninitialized buffer allocation vulnerability. The vulnerability exists in the Graphite component in the readglyph function in GlyphCache.cpp related to use of uninitialized memory. An unauthenticated, remote attacker can exploit this to have an unspecified impact...

Out-of-bounds Read

Mozilla Firefox is vulnerable to out-of-bounds reads. The vulnerability exists in the Graphite component in getClassGlyph function in Silf.cpp due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a denial of service condition...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bounds reads. This vulnerability exists in "graphite2::Silf::readGraphite" in Graphite2 Library. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

Denial Of Service (DoS)

Mozilla Firefox is an vulnerable to out-of-bounds reads. This exists in "graphite2::Pass::readPass" in Graphite2 Library. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to heap-based buffer overflow writes. This vulnerability exists in "lz4::decompress" in Graphite2 library. An attacker could exploit this issue to cause a crash or, possibly, execute arbitrary code...

Arbitrary Code Execution

Mozilla Firefox is vulnerable to Arbitrary Code Execution. This is because a flaw exists in the isLabelSafe function in nsIDNService.cpp that is triggered when handling characters from different unicode blocks. An unauthenticated, remote attacker can exploit this, via a specially crafted IDN...

Use-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This vulnerability exists in ActorsParent.cpp due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of arbitrary code...

Use-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. The vulnerability exists in the AppendAudioSegment function in TrackEncoder.cpp that is triggered when the number of channels in an audio stream changes while the Opus encoder is in use. An unauthenticated, remote attacker can exploit...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bound reads. The vulnerability exists in the IsComplete function in WebGLTexture.cpp that is triggered when handling textures. An unauthenticated, remote attacker can exploit this to disclose memory contents...