Mozilla Firefox WebGL Integer Overflow (CVE-2017-5459)

A memory corruption vulnerability exists in WebGL components of Mozilla Firefox. The vulnerability is due to an integer overflow in Intersect function while calculating destination frame buffer width and height. A remote attacker could exploit this vulnerability by enticing a user to open a...

openSUSE Security Update : Mozilla based packages (openSUSE-2017-712)

This update for Mozilla Firefox, Thunderbird, and NSS fixes the following issues : Mozilla Firefox was updated to 52.2esr boo1043960 MFSA 2017-16 : - CVE-2017-5472 bmo1365602 Use-after-free using destroyed node when regenerating trees - CVE-2017-7749 bmo1355039 Use-after-free during docshell...

[SECURITY] [DLA 991-1] firefox-esr security update

Package : firefox-esr Version : 52.2.0esr-1deb7u1 CVE ID : CVE-2017-5470 CVE-2017-5472 CVE-2017-7749 CVE-2017-7750 CVE-2017-7751 CVE-2017-7752 CVE-2017-7754 CVE-2017-7756 CVE-2017-7757 CVE-2017-7758 CVE-2017-7764 CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774 CVE-2017-7775 CVE-2017-7776...

[SECURITY] Fedora 25 Update: firefox-54.0-2.fc25

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 26 Update: firefox-54.0-2.fc26

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox security update

CentOS Errata and Security Advisory CESA-2017:1440 An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score,...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.2.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Mozilla Firefox Security Advisories (MFSA2017-15, MFSA2017-16) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisories (MFSA2017-15, MFSA2017-16) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : mozilla-firefox (SSA:2017-165-02)

New mozilla-firefox packages are available for Slackware 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-165-02. The text itself is copyright...

Mozilla Firefox ESR < 52.2 Multiple Vulnerabilities

The version of Mozilla Firefox ESR installed on the remote Windows host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to visit a...

Mozilla Firefox < 54 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 54. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to visit a...

Mozilla Firefox Security Advisories (MFSA2017-15, MFSA2017-16) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR < 52.2 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Mozilla: Use-after-free with track elements (MFSA 2017-16)

A use-after-free vulnerability during video control operations when a "" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

Mozilla Firefox http-index-format File Out-Of-Bounds Read (CVE-2017-5444)

An out-of-bounds read has been reported in Mozilla Firefox. The vulnerability is due to improper parsing of application/http-index-format format content which can result in a read past the end of an allocated object. A remote attacker could exploit this vulnerability by enticing a user to open a...

Mozilla Firefox Memory Misreference Denial of Service Vulnerability

Mozilla Firefox is an open source web browser. A denial of service vulnerability exists in Mozilla Firefox. An attacker may be able to exploit the vulnerability to corrupt the affected application, resulting in a denial of service condition...

Multiple Memory Corruption Vulnerabilities in Mozilla Firefox

Mozilla Firefox is an open source web browser. Mozilla Firefox suffers from multiple memory corruption vulnerabilities. Allow an attacker to execute arbitrary code in the context of a user running the affected application or cause a denial of service condition...

Multiple Unspecified Memory Corruption Vulnerabilities in Mozilla Firefox

Mozilla Firefox is an open source web browser. Mozilla Firefox suffers from multiple unspecified memory corruption vulnerabilities. An attacker can exploit the vulnerabilities to execute arbitrary code in the context of an affected application. A failed exploit attempt may result in a denial of...