Security vulnerabilities fixed in Thunderbird 45.6 — Mozilla

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. Event handlers on marquee elements were executed despite a strict Content Security Policy CSP that disallowed inline JavaScript. Memory corruption resulting in a potentially...

Mozilla Firefox ESR 45.x < 45.6 Multiple Vulnerabilities

The version of Mozilla Firefox ESR installed on the remote Windows host is 45.x prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist, such as when handling document state changes or HTML5 content, or else due to dereferencing alrea...

Mozilla Firefox ESR 45.x < 45.6 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is 45.x prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist, such as when handling document state changes or HTML5 content, or else due to...

Mozilla: Memory corruption in libGLES (MFSA 2016-94, MFSA 2016-95)

Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

CVE-2016-9897

Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

[ASA-201612-15] firefox: multiple issues

Arch Linux Security Advisory ASA-201612-15 ========================================== Severity: Critical Date : 2016-12-14 CVE-ID : CVE-2016-9080 CVE-2016-9893 CVE-2016-9894 CVE-2016-9895 CVE-2016-9896 CVE-2016-9897 CVE-2016-9898 CVE-2016-9899 CVE-2016-9900 CVE-2016-9901 CVE-2016-9902 CVE-2016-99...

CVE-2016-9897

Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

UBUNTU-CVE-2016-9897

Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

August 9, 2016 — KB3176493 (OS Build 10586.545)

None None...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Mozilla Firefox allows malicious actors who operate remotely to execute arbitrary code using specially crafted WebGL content, created with the Cesium JavaScript library...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the WebGL implementation of Google Chrome due to improper interaction between calls to clear and the state of the draw buffer. Exploiting this vulnerability allows malicious actors to trigger a service failure reading uninitialized memory by using a specially crafted...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Mozilla Firefox ESR allows malicious actors to execute arbitrary code using specially crafted WebGL content, created with the Cesium JavaScript library...

The vulnerability of the SeaMonkey software package allows a malicious attacker to execute arbitrary code or cause a service failure.

The SeaMonkey software contains a vulnerability in the WebGLContext::ValidateTextImageSize function. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by manipulating input data...

The vulnerability of the Firefox browser allows a malicious actor to bypass the restrictions.

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the WebGL.compressedTexImage2D and WebGL.compressedTexSubImage2D functions. Exploiting this vulnerability allows malicious actors to bypass domain restrictions and display content from another domain...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious actor to bypass restrictions.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of WebGL.compressedTexImage2D and WebGL.compressedTexSubImage2D functions. Exploiting this vulnerability allows malicious actors to bypass domain restrictions and display content from another domain...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the TSymbolTableLevel class in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory spillage, application termination, or other effects through the WebGL shader, resulting in array...

SUSE-SU-2016:1691-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss

MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss and mozilla-nspr were updated to fix nine security issues. MozillaFirefox was updated to version 45.2.0 ESR. mozilla-nss was updated to version 3.21.1. These security issues were fixed: - CVE-2016-2834: Memory safety bugs in NSS MFSA 2016-6...

Mozilla Firefox < 47.0 Multiple Vulnerabilities

Binary data 9383.prm...

Mozilla Firefox and Firefox ESR ANGLE Denial of Service Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox.Google ANGLE Almost Native Graphics Google ANGLE Almost Native Graphics Layer Engine is a graphics...

CVE-2016-2828

Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool...