SUSE-SU-2018:0374-1 Security update for MozillaFirefox

This update for MozillaFirefox to version 52.6 several issues. These security issues were fixed: - CVE-2018-5091: Use-after-free with DTMF timers bsc1077291. - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing...

Debian: Security Advisory (DLA-1053-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1118-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:0361-1 Security update for MozillaFirefox

This update for MozillaFirefox to version ESR 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5091: Use-after-free with DTMF timers bsc1077291. - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free whil...

Attackers Exploiting Unpatched Flaw in Flash

Adobe warned on Thursday that attackers are exploiting a previously unknown security hole in its Flash Player software to break into Microsoft Windows computers. Adobe said it plans to issue a fix for the flaw in the next few days, but now might be a good time to check your exposure to this...

Content spoofing in the attachment resource in the Firefox browser - CVE-2018-13389

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml...

Content spoofing in the attachment resource in the Firefox browser - CVE-2018-13389

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml...

[SECURITY] Fedora 26 Update: firefox-58.0.1-1.fc26

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Adobe Flash Player Zero-Day Spotted in the Wild

The South Korean Computer Emergency Response Team issued a warning Wednesday of a new Adobe Flash Player zero-day spotted in the wild. The security bulletin warns that the attacks are focused on South Koreans and involve malicious Microsoft Word documents. According to the South Korean Computer...

Mozilla Firefox < 58.0.1

The version of Firefox installed on the remote Windows host is prior to 58.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-05 advisory. - Sanitize HTML fragments created for chrome-privileged documentsCVE-2018-5124 CVE-2018-5124 Note that Nessus has not tested for...

[SECURITY] Fedora 27 Update: firefox-58.0.1-1.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2018-03615)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 58.0.1. The vulnerability can be exploited by remote attackers to execute arbitrary code via unfiltered output in the...

Mozilla Firefox Security Advisories (MFSA2018-05, MFSA2018-05) - Mac OS X

Mozilla Firefox is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA11187 ACE vulnerability in Mozilla Firefox

An unspecified vulnerability was found in Mozilla Firefox. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a unsanitized output in the browser UI. Original advisories Mozilla Foundation Security Advisory 2018-05 Related...

[SECURITY] Fedora 26 Update: firefox-58.0-4.fc26

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 27 Update: firefox-58.0-4.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 27 Update: firefox-58.0-3.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox security update

CentOS Errata and Security Advisory CESA-2018:0122 An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score,...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-02234)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 58. A remote attacker could exploit the vulnerability to access frames across sources...

Mozilla Firefox Domain Forgery Vulnerability

Mozilla Firefox for OS X is an open source web browser based on the OS X platform from the Mozilla Foundation in the U.S. Firefox ESR for OS X is an extended support version of Firefox based on the OS X platform. A security vulnerability exists in previous versions of Mozilla Firefox 58 for OS X,...