Security update for MozillaFirefox (important)

This update for Mozilla Firefox to version 52.7.0esr fixes multiple issues. Security issues fixed bsc1085130, MFSA 2018-07: - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payloa...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-07085)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in a legacy extension in Mozilla Firefox. A remote user can send a specially crafted request to exploit the vulnerability to view potentially...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2018-07313)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An arbitrary code execution vulnerability exists in Mozilla Firefox. A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary code on the...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2018-07312)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An arbitrary code execution vulnerability exists in Mozilla Firefox. A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary code on the...

Mozilla Firefox Script Injection Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A script injection vulnerability exists in Mozilla Firefox. The vulnerability is caused due to a flaw in the WebExtension browserAction. A remote user can exploit the vulnerability to bypass...

Mozilla Firefox Domain Spoofing Vulnerability (CNVD-2018-07310)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A domain spoofing vulnerability exists in Mozilla Firefox. A remote user can exploit the vulnerability to spoof domain names via the Android Custom Tab. Android-based systems are affected...

Mozilla Firefox < 59 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 59. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include"compat.inc"; if description...

Mozilla Firefox < 59.0

The version of Firefox installed on the remote Windows host is prior to 59.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-06 advisory. - A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor...

Mozilla Firefox Security Advisories (MFSA2018-06, MFSA2018-07) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisories (MFSA2018-06, MFSA2018-07) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisories (MFSA2018-06, MFSA2018-07) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

openSUSE Security Update : MozillaFirefox (openSUSE-2018-255)

This update for Mozilla Firefox to version 52.7.0esr fixes multiple issues. Security issues fixed bsc1085130, MFSA 2018-07 : - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP paylo...

Mozilla Firefox ESR < 52.7

The version of Firefox ESR installed on the remote Windows host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-07 advisory. - Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6. These bu...

Mozilla Firefox ESR < 52.7 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include"compat.inc"; if description...

Mozilla Firefox ESR Security Advisories (MFSA2018-06, MFSA2018-07) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-07087)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in the WebExtension Find API of Mozilla Firefox. A remote user can exploit the vulnerability by sending a specially crafted request to view...

Slackware 14.2 / current : mozilla-firefox (SSA:2018-072-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-072-01. The text itself is copyright C Slackware Linux,...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-07086)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in the 'app.support.baseURL' preference of Mozilla Firefox. A remote user can exploit the vulnerability by sending a specially crafted request to...

Mozilla Firefox Content Restriction Bypass Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A content restriction bypass vulnerability exists in Mozilla Firefox. A remote user can invoke the 'view-source:' URL to bypass content restrictions and view potentially sensitive information i...

Mozilla Firefox memory misreference vulnerability (CNVD-2018-07091)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. Mozilla Firefox suffers from a memory misreference vulnerability when manipulating elements, events, and selection ranges during editor operations. An attacker could exploit this vulnerability ...