[SECURITY] [DLA 1727-1] firefox-esr security update

Package : firefox-esr Version : 60.6.1esr-1deb8u1 CVE ID : CVE-2019-9810 CVE-2019-9813 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems have been fixed in version...

Debian DLA-1722-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 'Jessie', these problems have been fixed in version 60.6.0esr-1deb8u1. We recommend that you upgrade your firefox-esr packages. NOTE: Tenabl...

Mozilla Firefox Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer overflow vulnerability exists in Mozilla Firefox versions prior to 66.0.1, which stems from a lack of boundary checking in the program. An attacker could exploit this vulnerability to execute...

Slackware 14.2 / current : mozilla-firefox (SSA:2019-081-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-081-01. The text itself is copyright C Slackware Linux,...

[SECURITY] [DSA 4417-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4417-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 24, 2019 https://www.debian.org/security/faq -...

OPENSUSE-SU-2019:0248-1 Security update for MozillaFirefox

This update for MozillaFirefox to version 60.5.1esr fixes the following issues: Security vulnerabilities addressed MFSA-2019-05, boo1125330: - CVE-2018-18356: Fixed a use-after-free vulnerability in the Skia library that could occur when creating a path, leading to a potentially exploitable crash...

OPENSUSE-SU-2019:0132-1 Security update for MozillaFirefox

This update for MozillaFirefox to version 60.5.0esr fixes the following issues: Security issues fixed: - CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream boo1122983. - CVE-2018-18505: Fixed a privilege escalation through IPC channel messages boo1122983. - CVE-2018-18501: Fixed multiple...

Debian: Security Advisory (DSA-4417-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.6.1esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. The patched...

firefox security update

CentOS Errata and Security Advisory CESA-2019:0623 An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Firefox Memory Corruption Vulnerability (CNVD-2019-08540)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the Prio inventory in versions of Mozilla Firefox prior to 66. An attacker could exploit this vulnerability to cause memory corruption...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2019-08521)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox E...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2019-08533)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in versions of Mozilla Firefox prior to 66, which stems from the program's failure to perform sufficient boundary detection on data. An attacker could...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2019-08534)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox ESR versions...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2019-08542)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 66. An attacker could exploit this vulnerability to cause a denial of service...

Mozilla Firefox and Firefox ESR Improper Boundary Checking Vulnerability

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox ESR versions...

Mozilla Firefox < 66.0.1

The version of Firefox installed on the remote Windows host is prior to 66.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-09 advisory. - Incorrect handling of \proto\ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for...

KLA11450 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability in IonMonkey JIT compiler can be exploited remotely t...

Mozilla Firefox and Firefox ESR SMIL animation controller memory misreference vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A memory misreference vulnerability exists in the SMIL animation controller in...

Mozilla Firefox Memory Corruption Vulnerability (CNVD-2019-08522)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 65. An attacker can exploit the vulnerability to cause memory corruption or possibly execute arbitrary code...