firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – Educational JavaScript Port Educational implementation of the public exploit for CVE-2016-9079, adapted from the original Exploit-DB/Metasploit module for standalone use. Disclaimer This repository is provided strictly for educational and research purposes. It contains...

firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – Porting JavaScript Educativo Implementazione educativa dell'exploit pubblico per CVE-2016-9079, adattata dal modulo originale Exploit-DB/Metasploit per uso standalone. Disclaimer Questo repository è fornito esclusivamente a scopo educativo e di ricerca. Contiene un...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the SVG SMIL animation handling in packages/sanitize-html/index.js. An attacker can execute JavaScript in the application’s origin by supplying an allowed or element with attributeName="href" or xlink:href"...

gpac:fuzz_scene: Heap-use-after-free in gf_node_get_attribute_by_tag

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4575871779536896 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x799fb81e0fe0 Crash State:...

gpac:fuzz_scene: Heap-use-after-free in gf_node_get_attribute_by_tag

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5956066784641024 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x76d61efef990 Crash...

Mozilla Firefox < 53.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 53.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-10 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 ...

EUVD-2017-14537

Malware in sbrugna...

EUVD-2019-19158

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-9796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration ...

SUSE CVE-2014-1541

Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...

SUSE CVE-2017-5433

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox E...

SUSE CVE-2019-9796

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

Mozilla Firefox Security Advisory (MFSA2014-52) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

SUSE: Security Advisory (SUSE-SU-2014:0905-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-9796

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

SMIL Animation Controller Unauthorized Access Compromise

The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity...

Use-after-free

Mozilla Thunderbird is vulnerable to use-after-free vulnerability. The attack exists because of use-after-free with SMIL animation controller...

Mozilla: Use-after-free with SMIL animation controller

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. SMIL animation functions may crash when pointers to animation elements in an array are dropped from the animation controller while still in use causing denial of service conditions...

CVE-2019-9796

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...