Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-07088)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in the Fetch API of Mozilla Firefox. A remote user can exploit the vulnerability by sending a specially crafted request to view potentially...

Mozilla Firefox memory corruption vulnerability (CNVD-2018-07089)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A memory corruption vulnerability exists in Mozilla Firefox. An attacker can exploit this vulnerability to cause a denial of service by sending packets with a mismatched RTP payload type in a...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2018-07092)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. Mozilla Firefox suffers from a buffer overflow vulnerability when manipulating SVG animatedPathSegList via scripting. An attacker can exploit this vulnerability to cause a denial of service...

Mozilla Firefox Out-of-Bounds Write Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An out-of-bounds write vulnerability exists in Mozilla Firefox. The vulnerability arises due to a lack of parameter validation for IPC messages. An attacker can exploit this vulnerability to...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Flash, Windows Users: It’s Time to Patch

Adobe and Microsoft each pushed critical security updates to their products today. Adobe's got a new version of Flash Player available, and Microsoft released 14 updates covering more than 75 vulnerabilities, two of which were publicly disclosed prior to today's patch release. The Microsoft updat...

KLA11206 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilitieswere found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface, cause denial of service...

Solaris 10 (x86) : 125540-06

Mozilla 1.7x86: Mozilla Firefox Web browser. Date this patch was last updated by Sun : Apr/03/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[SECURITY] Fedora 26 Update: firefox-58.0.2-1.fc26

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 27 Update: firefox-58.0.2-1.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

GLSA-201802-03 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201802-03 Mozilla Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the referenced CVE identifiers for details. Impact : A remote attacker could entice a user to view...

Mozilla Firefox: Multiple vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla Project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the referenced CVE identifiers for details. Impact A remote attacker could entice a user to view a specially crafte...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

The vulnerability in the implementation of TLS 1.2 in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to induce a service failure.

The vulnerability in the implementation of TLS 1.2 in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Mozilla Firefox ESR browser, related to memory-related errors, allows an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox ESR browser is related to errors in memory management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in the implementation of SOP (Same-origin policy). These vulnerabilities allow attackers to gain unauthorized access to protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in the implementation of SOP Same-origin policy. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access to protected information using...

The vulnerability in the implementation of the anti-virus and phishing protection functions for Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows attackers to carry out phishing attacks.

The vulnerability in the implementation of malware protection functions for Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to errors in the process of checking uploaded files, which are encoded using “blob:“ and “data:“. Exploiting this vulnerability allows a malicious...

The vulnerability of the ANGLE graphic library in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the ANGLE graphics library in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the transmission of incorrect values within the library. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to trigger a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird arise from an operation that goes beyond the buffer boundaries in memory when reading certificates from the disk. Exploiting these vulnerabilities can allow a malicious actor to cause service failures using...

The vulnerability in the `mozilla::a11y::DocAccessible::PutChildrenBack` function of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a attacker to trigger a service failure.

The vulnerability of the mozilla::a11y::DocAccessible::PutChildrenBack function in Mozilla Firefox, Firefox ESR, and the Thunderbird email client arises due to an operation that goes beyond the buffer boundaries in memory when working with ARIA Accessible Rich Internet Applications attributes usi...