Mozilla: Incorrect use of discarded images by RasterImage (MFSA 2014-04)

RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attackers to execute arbitrary code or cause a denial of service incorrect write operations via crafted...

PT-2014-1146

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The Content Security Policy CSP implementation operates on XSLT stylesheets according to style-src directives instead of script-src directives. This might allo...

PT-2014-1164

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla Firefox ESR versions prior to 24.3 Mozilla Thunderbird versions prior to 24.3 Mozilla SeaMonkey versions prior to 2.24 Description The System Only Wrapper SOW implementation in the affected softwa...

CVE-2014-1479

The System Only Wrapper SOW implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remote attackers to bypass intended restrictions on XUL content via vectors involvi...

Mozilla Releases Multiple Updates

The Mozilla Foundation has released updates for the following products to address multiple vulnerabilities: Firefox 27 Firefox ESR 24.3 Thunderbird 24.3 Seamonkey 2.24 These vulnerabilities could allow a remote attacker to execute arbitrary code, bypass intended access restrictions, cause a...

PT-2014-4206

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla Firefox ESR 24.x versions prior to 24.3 Thunderbird versions prior to 24.3 SeaMonkey versions prior to 2.24 NSS versions prior to 3.15.4 Description A race condition in libssl in Mozilla Network...

PT-2014-1161

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue is related to errors in the implementation of the MPostWriteBarrier class, allowing remote attackers to cause a denial of service or possibly execute...

PT-2014-1152

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla Firefox ESR 24.x versions prior to 24.3 Mozilla Thunderbird versions prior to 24.3 Mozilla SeaMonkey versions prior to 2.24 Description The issue is related to a use-after-free error in the...

PT-2014-4207

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.15.4 Mozilla Firefox versions prior to 27.0 Firefox ESR 24.x versions prior to 24.3 Thunderbird versions prior to 24.3 SeaMonkey versions prior to 2.24 Description The issue makes it...

CVE-2014-1481

Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging inconsistency in native getter methods across different JavaScript engines...

PT-2014-1165

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Firefox ESR 24.x versions prior to 24.3 Thunderbird versions prior to 24.3 SeaMonkey versions prior to 2.24 Description The issue is related to errors in the source code, specifically in the RasterImage.c...

PT-2014-1158

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timi...

PT-2014-1140

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue is related to a flaw in the file-download implementation, which does not properly restrict the timing of button selections. This allows remote...

PT-2014-1149

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla SeaMonkey versions prior to 2.24 Description The issue is related to errors in the implementation of Web Workers technology, allowing remote attackers to execute arbitrary code by terminating a...

PT-2014-1139

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla Firefox ESR versions 24.x prior to 24.3 Mozilla Thunderbird versions prior to 24.3 Mozilla SeaMonkey versions prior to 2.24 Description The vulnerability is related to errors in the implementation...

PT-2014-1162

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla Firefox ESR versions 24.x prior to 24.3 Mozilla Thunderbird versions prior to 24.3 Mozilla SeaMonkey versions prior to 2.24 Description The issue is related to an inconsistency in native getter...

Mozilla SeaMonkey - Filter Bypass & Persistent Vulnerability

Document Title: =============== Mozilla SeaMonkey - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=967 Mozilla Bug Tracking ID: 881686 http://www.vulnerability-lab.com/getcontent.php?id=953 Mozilla Bug Tracking I...

Mozilla SeaMonkey - Filter Bypass & Persistent Vulnerability

Document Title: =============== Mozilla SeaMonkey - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=967 Mozilla Bug Tracking ID: 881686 http://www.vulnerability-lab.com/getcontent.php?id=953 Mozilla Bug Tracking I...

[BrowserHistorySpy v3.0] All-in-one Tool to View Web History of Firefox/Chrome/IE/Chrome SXS/CoolNovo/SeaMonkey Browsers

Browser History Spy is the all-in-one software to instantly recover or view the browsing history from popular web browsers. It helps in recovering or viewing web history of following browsers. Mozilla Firefox Internet Explorer Google Chrome Google Chrome Canary/SXS CoolNovo SeaMonkey Browser It...

[Browser Password Decryptor v6.0] Browser Password Recovery Tool

Browser Password Decryptor is the FREE software to instantly recover website login passwords stored by popular web browsers. Currently it can recover saved login passwords from following browsers. Firefox Internet Explorer Google Chrome Google Chrome Canary/SXS CoolNovo Browser Opera Browser Appl...