openSUSE Security Update : Mozilla Firefox (openSUSE-2018-320)

This update for Mozilla Firefox to version 52.7.3 fixes the following issue : - CVE-2018-5148: A use-after-free in compositor allowed for crashes to be triggered Or potentially have further code execution impact bsc1087059 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Mozilla Firefox ESR < 52.7.3

The version of Firefox ESR installed on the remote Windows host is prior to 52.7.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used...

Mozilla Firefox < 59.0.2

The version of Firefox installed on the remote Windows host is prior to 59.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used inste...

SUSE-SU-2018:0850-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 bsc1085130: - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds writ...

[SECURITY] Fedora 26 Update: mozjs52-52.7.2-1.fc26

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.3esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Mozilla Firefox Security Advisories (MFSA2018-10, MFSA2018-10) - Mac OS X

Mozilla Firefox is prone to an use-after-free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisories (MFSA2018-10, MFSA2018-10) - Mac OS X

Mozilla Firefox ESR is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox ESR Security Advisories (MFSA2018-10, MFSA2018-10) - Windows

Mozilla Firefox ESR is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox Security Advisories (MFSA2018-10, MFSA2018-10) - Windows

Mozilla Firefox is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Slackware 14.2 / current : mozilla-firefox (SSA:2018-085-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-085-01. The text itself is copyright C Slackware Linux,...

[SECURITY] Fedora 28 Update: firefox-59.0.1-1.fc28

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

KLA11228 A use-after-free vulnerability in Mozilla Firefox and Firefox ESR

A use-after-free vulnerability was found in Mozilla Firefox. By exploiting this vulnerability malicious users can cause denial of service. Original advisories Mozilla Foundation Security Advisory 2018-10 Related products Mozilla-Firefox Mozilla-Firefox-ESR CVE list CVE-2018-5148 critical Solution...

Mozilla Firefox < 59.0.1

The version of Firefox installed on the remote Windows host is prior to 59.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-08 advisory. - The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on...

Mozilla Firefox ESR < 52.7.2

The version of Firefox ESR installed on the remote Windows host is prior to 52.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-08 advisory. - The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis o...

(Pwn2Own) Mozilla Firefox libvorbis OGG Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the libvorbis...

Domaintrader 2.5.3 Cross Site Scripting

i? Domaintrader v.2.5.3 Cross-Site Scripting 6th of February, 2018 Found by Uladzislau Murashka - https://sm0k3.net Vendor homepage: www.smartscriptsolutions.com Software link: http://www.smartscriptsolutions.com/domain-trader/ Version of local application copy: 2.5.2 but valid also for 2.5.3...

Mozilla Firefox ESR Security Advisories (MFSA2018-08, MFSA2018-08) - Mac OS X

Mozilla Firefox ESR is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox Security Advisories (MFSA2018-08, MFSA2018-08) - Windows

Mozilla Firefox is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox ESR Security Advisories (MFSA2018-08, MFSA2018-08) - Windows

Mozilla Firefox ESR is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...