CVE-2018-5186

Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 61...

Ubuntu: Security Advisory (USN-3688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS : Spidermonkey vulnerabilities (USN-3688-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3688-1 advisory. Multiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of service, or execute arbitrary...

USN-3688-1 mozjs52 vulnerabilities

Multiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of service, or execute arbitrary code...

USN-3688-1: Spidermonkey vulnerabilities

Multiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of service, or execute arbitrary code...

CVE-2018-5150

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird 52.8,...

[SECURITY] Fedora 28 Update: mozjs52-52.7.2-1.fc28

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript...

[SECURITY] Fedora 26 Update: mozjs52-52.7.2-1.fc26

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript...

[SECURITY] Fedora 27 Update: mozjs52-52.7.2-1.fc27

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript...

CVE-2018-5145

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...

spidermonkey: Global-buffer-overflow in js::Fprinter::put

Detailed report: https://oss-fuzz.com/testcase?key=4895038040440832 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x000003826a31 Crash State: js::Fprinter::put JSString::dumpRepresentationHeader...

CVE-2018-5093

A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. This vulnerability affects Firefox 58...

spidermonkey: Heap-buffer-overflow in _ZN2js13DispatchTypedINS_17PreBarrierFunctorIN2JS5ValueEEEJEEEDTclfp_scP8JSObjec

Detailed report: https://oss-fuzz.com/testcase?key=4564957816422400 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61100032bcc0 Crash State:...

spidermonkey: Heap-buffer-overflow in js::wasm::Table::set

Detailed report: https://oss-fuzz.com/testcase?key=6489859028942848 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6110001d0fc8 Crash State: js::wasm::Table::set js::WasmTableObject::setImpl...

spidermonkey: Heap-buffer-overflow in js::WasmTableObject::getImpl

Detailed report: https://oss-fuzz.com/testcase?key=6215596157960192 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6110001b4c80 Crash State: js::WasmTableObject::getImpl js::WasmTableObject::get...

spidermonkey: NULL

Detailed report: https://oss-fuzz.com/testcase?key=6569646955167744 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fa23f616000 Crash State: NULL Sanitizer: address ASAN Reproducer Testcase:...

CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

CVE-2017-7802

A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects...

CVE-2017-7798

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR 52.3 and...