SUSE CVE-2007-0008

Integer underflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to...

SUSE CVE-2009-3982

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

SUSE CVE-2023-23602

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

The vulnerability of the ANGLE library in Mozilla Firefox ESR and the Thunderbird email client allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ANGLE library in Mozilla Firefox ESR and the Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

DEBIAN-CVE-2022-22747

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

The vulnerability in the Service Workers service of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to circumvent existing security restrictions.

The vulnerability of the Service Workers service in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

Vulnerabilities in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to resource management errors, allow attackers to compromise the confidentiality and integrity of protected information.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to resource management errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of information that is loaded from subresources...

Vulnerability of the isolated iframe environment in Firefox web browsers, Firefox ESR, and Thunderbird email client, allowing attackers to circumvent existing security restrictions

The vulnerability in the isolated iframe environment of Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an incorrect limitation on the number of visible layers or frames. Exploiting this vulnerability allows a malicious actor to bypass existing security...

The vulnerability in the SVG markup language implementation of browsers like Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability in the SVG markup language implementation of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DEBIAN-CVE-2021-38493

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 78.14,...

UBUNTU-CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows attackers to execute arbitrary code.

The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL

When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

The vulnerability of DSA signatures in web browser software such as Firefox, Firefox-esr, and Thunderbird, which allows unauthorized access to confidential data due to information disclosure caused by discrepancies in signatures.

The vulnerability of DSA signatures in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, involves the disclosure of information due to incompatibility. Exploiting this vulnerability can allow attackers to gain access to confidential data...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client arises from the mixing of symbols from the “Canadian Syllabics” block with symbols from other blocks, allowing attackers to perform spear-phishing attacks.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the mixing of symbols from the “Canadian Syllabics” block with symbols from other blocks. Exploiting this vulnerability allows a remote attacker to perform spam attacks...

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to reading data from memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the lack of protective measures for website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for handling web page structures. Exploiting these vulnerabilities allows a remote attacker to perform cross-site scripting attacks by redirecting users to the...

The vulnerability in the input method editor (IME) editing methods of Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the input method editor IME editing tools in Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after event handling is released. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the WebGL component (a web-based graphics library) in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows attackers to disclose protected information.

The vulnerability of the WebGL component a web-based graphics library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability in the implementation of the ConvolvePixel() function in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the implementation of the ConvolvePixel function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...