PT-2014-1290

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 Mozilla Firefox ESR versions prior to 24.5 Mozilla Thunderbird versions prior to 24.5 SeaMonkey versions prior to 2.26 Description The issue allows a remote attacker to execute arbitrary code or cause a...

PT-2014-1287

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 Mozilla Firefox ESR versions prior to 24.5 Mozilla Thunderbird versions prior to 24.5 SeaMonkey versions prior to 2.26 Description The issue allows a remote attacker to execute arbitrary code by conductin...

CVE-2014-1519

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

UBUNTU-CVE-2014-1522

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read, memory corruption, and application crash via crafte...

PT-2014-1456

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 SeaMonkey versions prior to 2.26 Description The issue exists in the mozilla::dom::TextTrack::AddCue function due to incorrect garbage collection related to Text Track Manager variables. This allows remot...

SeaMonkey < 2.26 Multiple Vulnerabilities

The installed version of SeaMonkey is a version prior to 2.26 and is, therefore, potentially affected by the following vulnerabilities : - An issue exists in the Network Security NSS library due to improper handling of IDNA domain prefixes for wildcard certificates. This issue could allow man-in-...

UBUNTU-CVE-2014-1518

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

CVE-2014-1531

Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...

CVE-2014-1529

The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page f...

PT-2014-1453

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 SeaMonkey versions prior to 2.26 Description The issue allows remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operatio...

PT-2014-1285

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 Mozilla Firefox ESR versions 24.x prior to 24.5 SeaMonkey versions prior to 2.26 Thunderbird versions prior to 24.5 Description The issue is related to a use-after-free vulnerability in the...

UBUNTU-CVE-2014-1528

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

CVE-2014-1518

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

Mozilla Releases Security Updates for Firefox, Thunderbird, and Seamonkey

The Mozilla Foundation has released security updates to address multiple vulnerabilities in Firefox, Thunderbird, and Seamonkey. Exploitation of these vulnerabilities may allow an attacker to obtain sensitive information, cause a denial-of-service condition, execute arbitrary code, conduct phishi...

PT-2014-1454

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 SeaMonkey versions prior to 2.26 Description The issue is related to the mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem, which allows remote attackers to execute...

PT-2014-1288

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 Mozilla Firefox ESR versions prior to 24.5 Thunderbird versions prior to 24.5 SeaMonkey versions prior to 2.26 Description The issue is related to a vulnerability in the WebGLContext::ValidateTextImageSiz...

PT-2014-1451

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 SeaMonkey versions prior to 2.26 Description The issue allows remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code. The...

CVE-2014-1524

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of...

UBUNTU-CVE-2014-1519

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2014-1526

The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped...