[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.5.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information,...

Mozilla Firefox ESR < 60.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-02 advisory. - An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication ...

Slackware 14.2 / current : mozilla-firefox (SSA:2019-029-01)

New mozilla-firefox packages are available for 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-029-01. The text itself is copyright C Slackware Linux, Inc...

Debian: Security Advisory (DLA-1648-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Security Advisories (MFSA2018-31, MFSA2019-03) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisories (MFSA2018-31, MFSA2019-03) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Advisories (MFSA2018-31, MFSA2019-03) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisories (MFSA2018-31, MFSA2019-03) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR < 60.5

The version of Firefox ESR installed on the remote Windows host is prior to 60.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-02 advisory. - An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to...

Mozilla Firefox 65 Ups the Ante on Privacy with Anti-Tracking Efforts

Mozilla has unveiled new anti-tracking policies and redesigned privacy controls in tandem with the release of Firefox 65 on Tuesday. The company announced a new set of redesigned controls for the Content Blocking section, where users can choose their desired level of privacy protection. These are...

KLA11410 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1...

Razy Malware Attacks Browser Extensions to Steal Cryptocurrency

UPDATE A Windows malware dubbed “Razy” has been uncovered that sports a toolbox of cryptocurrency theft and fraud tools. Razy works by weaponizing browser extensions in order to perpetrate a range of online scams on unwitting victims. According to researchers at Kaspersky Lab, the trojan targets...

Mozilla Firefox 64 Information Disclosure Exploit

Mozilla Firefox versions 64 and below have an issue where an overly liberal same-origin policy for file URIs and a bug in the implementation of this policy make Firefox vulnerable to exposure of local files to a remote attacker. Product: Firefox Manufacturer: Mozilla Affected Versions: = 64 Teste...

Mozilla Firefox Information Disclosure Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability. A remote attacker exposes local files...

Mozilla Firefox 64 Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-041 Product: Firefox Manufacturer: Mozilla Affected Versions: = 64 Tested Versions: 61, 62, 63, 64 Vulnerability Type: Information Exposure CWE-200 Risk Level: Medium Solution Status: Open Manufacturer Notification: 2018-07-19...

Remote Code Execution (RCE)

Mozilla Firefox is vulnerable to remote code execution RCE. A remote attacker is able to execute arbitrary code on a user's system via malformed content that leads to memory safety and corruption bugs in the application...

Authorization Bypass

Mozilla Firefox and Thunderbird is vulnerable to authorization bypass. The proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configur...

Information Disclosure

Mozilla Firefox is vulnerable to information disclosure. Setting a master password does not delete unencrypted passwords that were previously stored, allowing other users to retrieve the stored password data...

Information Disclosure

Mozilla Firefox is vulnerable to information disclosure. A privacy flaw was discovered in Firefox. In Private Browsing mode, a web worker could write persistent data to IndexedDB, which was not cleared when exiting and would persist across multiple sessions. A malicious website could exploit the...

Denial Of Services(DoS)

Mozilla Firefox is vulnerable to denial of service DoS. The vulnerability exists because it does not prevent the processing of malformed web content, causing an application crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...