Lucene search
+L
MozillaMost viewed

1596 matches found

Mozilla
Mozilla
added 2014/12/02 12:00 a.m.50 views

Use-after-free during HTML5 parsing — Mozilla

Security researcher SkyLined reported a use-after-free created by triggering the creation of a second root element while parsing HTML written to a document created with document.open. This leads to a potentially exploitable crash...

6.8CVSS5.9AI score0.03377EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2014/10/14 12:00 a.m.50 views

Web Audio memory corruption issues with custom waveforms — Mozilla

Security researcher Holger Fuhrmannek used the used the Address Sanitizer tool to discover an out-of-bounds read issue with Web Audio when interacting with custom waveforms with invalid values. This results in a crash and could allow for the reading of random memory which may contain sensitive...

6.4CVSS8.8AI score0.02896EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2014/07/22 12:00 a.m.50 views

Use-after-free with FireOnStateChange event — Mozilla

Security researcher Jethro Beekman of the University of California, Berkeley reported a crash when the FireOnStateChange event is triggered in some circumstances. This leads to a use-after-free and a potentially exploitable crash when it occurs...

9.3CVSS9AI score0.04907EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.50 views

Spoofing addressbar though SELECT element — Mozilla

Security researcher Jordi Chancel discovered a method to put arbitrary HTML content within elements and place it in arbitrary locations. This can be used to spoof the displayed addressbar, leading to clickjacking and other spoofing attacks...

4.3CVSS1.1AI score0.01993EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2013/09/17 12:00 a.m.50 views

Shared object library loading from writable location — Mozilla

Mozilla developer Vladimir Vukicevic reported that Firefox for Android will optionally load a shared object .so library in order to enable GL tracing. When this is occurs, it can be from a world writable location, allowing for it to be replaced by malicious third party applications before it is...

6.8CVSS6.1AI score0.01823EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2013/06/25 12:00 a.m.50 views

X-Frame-Options ignored when using server push with multi-part responses — Mozilla

Bugzilla developer Frédéric Buclin reported that the X-Frame-Options header is ignored when server push is used in multi-part responses. This can lead to potential clickjacking on sites that use X-Frame-Options as a protection...

4CVSS1.3AI score0.01661EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2013/04/02 12:00 a.m.50 views

Privilege escalation through Mozilla Maintenance Service — Mozilla

Security researcher Frédéric Hoguin discovered that the Mozilla Maintenance Service on Windows was vulnerable to a buffer overflow. This system is used to update software without invoking the User Account Control UAC prompt. The Mozilla Maintenance Service is configured to allow unprivileged user...

7.2CVSS6.7AI score0.00388EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2012/10/11 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:16.0.1) — Mozilla

Mozilla developers identified and fixed two top crashing bugs in the browser engine used in Firefox and other Mozilla-based products. These bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to ru...

10CVSS9.6AI score0.04199EPSS
SaveExploits0References4Affected Software3
Mozilla
Mozilla
added 2012/04/24 12:00 a.m.50 views

Crash with WebGL content using textImage2D — Mozilla

Mozilla community member Ms2ger found an image rendering issue with WebGL when texImage2D uses use JSVALTOOBJECT on arbitrary objects. This can lead to a crash on a maliciously crafted web page. While there is no evidence that this is directly exploitable, there is a possibility of remote code...

9.3CVSS2.9AI score0.03498EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2012/04/24 12:00 a.m.50 views

Ambiguous IPv6 in Origin headers may bypass webserver access restrictions — Mozilla

Security researcher Simone Fabiano reported that if a cross-site XHR or WebSocket is opened on a web server on a non-standard port for web traffic while using an IPv6 address, the browser will send an ambiguous origin headers if the IPv6 address contains at least 2 consecutive 16-bit fields of...

2.6CVSS9.1AI score0.01853EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2011/12/20 12:00 a.m.50 views

Crash when plugin removes itself on Mac OS X — Mozilla

FireBreath developer Richard Bateman reported a crash on Mac OS X that occurred when a plugin deletes its containing DOM frame during a call from that frame. The observed symptom is a null dereference but we cannot rule out the possibility that content from a scriptable plugin such as Flash could...

6.8CVSS5.8AI score0.01307EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2011/11/08 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:8.0) — Mozilla

Mozilla developers fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run...

10CVSS9.9AI score0.05813EPSS
SaveExploits0References6Affected Software3
Mozilla
Mozilla
added 2011/04/28 12:00 a.m.50 views

WebGLES vulnerabilities — Mozilla

Two crashes that could potentially be exploited to run malicious code were found in the WebGL feature and fixed in Firefox 4.0.1. In addition the WebGLES libraries could potentially be used to bypass a security feature of recent Windows versions. The WebGL feature was introduced in Firefox 4; old...

10CVSS6.2AI score0.03284EPSS
SaveExploits1References5Affected Software1
Mozilla
Mozilla
added 2011/03/01 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) — Mozilla

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

10CVSS3.1AI score0.05787EPSS
SaveExploits0References4Affected Software3
Mozilla
Mozilla
added 2010/09/07 12:00 a.m.50 views

Crash and remote code execution in normalizeDocument — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that code used to normalize a document contained a logical flaw that could be leveraged to run arbitrary code. When the normalization code ran, a static count of the document's child nodes was used in the traversal, so...

9.3CVSS2AI score0.05366EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2010/03/30 12:00 a.m.50 views

Image src redirect to mailto: URL opens email editor — Mozilla

phpBB developer Henry Sudhof reported that when an image tag points to a resource that redirects to a mailto: URL, the external mail handler application is launched. This issue poses no security threat to users but could create an annoyance when browsing a site that allows users to post arbitrary...

4.3CVSS1.6AI score0.02219EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2010/02/17 12:00 a.m.50 views

XSS due to window.dialogArguments being readable cross-domain — Mozilla

Security researcher Hidetake Jo of Microsoft Vulnerability Research reported that the properties set on an object passed to showModalDialog were readable by the document contained in the dialog, even when the document was from a different domain. This is a violation of the same-origin policy and...

5CVSS0.9AI score0.02147EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2009/08/01 12:00 a.m.50 views

Compromise of SSL-protected communication — Mozilla

IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities CA which issue server certificates. In particular, if a malicious person requested a certificate for a host name with an invalid...

6.8CVSS1.6AI score0.04959EPSS
SaveExploits4References3Affected Software4
Mozilla
Mozilla
added 2008/07/01 12:00 a.m.50 views

Crash and remote code execution in block reflow — Mozilla

Security research firm Astabis reported a vulnerability in Firefox 2 submitted through the iSIGHT Partners GVP Program by Greg McManus, Primary GVP Researcher. The reported crash in Mozilla's block reflow code could be used by an attacker to crash the browser and run arbitrary code on the victim'...

10CVSS3.8AI score0.07081EPSS
SaveExploits1References3Affected Software3
Mozilla
Mozilla
added 2008/07/01 12:00 a.m.50 views

Peer-trusted certs can use alt names to spoof — Mozilla

Mozilla developer John G. Myers reported a weakness in the trust model used by Mozilla regarding alternate names on self-signed certificates and those with mismatched names that if accepted could be used to spoof a secure connection to any other site. This problem was independently reported by...

4CVSS2.1AI score0.0124EPSS
SaveExploits1References2Affected Software3
Mozilla
Mozilla
added 2007/10/18 12:00 a.m.50 views

Digest authentication request splitting — Mozilla

Security researcher Stefano Di Paola reported that Firefox did not properly validate the user ID when making an HTTP request using Digest Authentication to log into a web site. A malicious page could abuse this to inject arbitrary HTTP headers by including a newline character in the user ID...

4.3CVSS1AI score0.12736EPSS
SaveExploits1References3Affected Software2
Mozilla
Mozilla
added 2007/05/30 12:00 a.m.50 views

Security Vulnerability in APOP Authentication — Mozilla

Gaëtan Leurent informed us of a weakness in APOP authentication that could allow an attacker to recover the first part of your mail password if the attacker could interpose a malicious mail server on your network masquerading as your legitimate mail server. With normal settings it could take...

2.6CVSS2.1AI score0.02423EPSS
SaveExploits1References4Affected Software2
Mozilla
Mozilla
added 2006/04/13 12:00 a.m.50 views

Privilege escalation through Print Preview — Mozilla

Georgi Guninski reported two variants of using scripts in an XBL control to gain chrome privileges when the page is viewed under "Print Preview"...

7.6CVSS3.1AI score0.06371EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2024/10/01 12:00 a.m.49 views

Security Vulnerabilities fixed in Firefox 131 — Mozilla

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible.This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffecte...

9.8CVSS8.2AI score0.00587EPSS
SaveExploits0References14Affected Software1
Mozilla
Mozilla
added 2023/05/09 12:00 a.m.49 views

Security Vulnerabilities fixed in Firefox ESR 102.11 — Mozilla

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. An out-of-bound read could have led to a crash in the RLBox Expat driver. A missing delay in popup notifications could have made it...

8.8CVSS7.4AI score0.00918EPSS
SaveExploits0References9Affected Software1
Mozilla
Mozilla
added 2020/12/01 12:00 a.m.49 views

Security Vulnerabilities fixed in Thunderbird 78.5.1 — Mozilla

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable...

9.3CVSS1.9AI score0.01247EPSS
SaveExploits0References1Affected Software1
Mozilla
Mozilla
added 2017/01/24 12:00 a.m.49 views

Security vulnerabilities fixed in Firefox ESR 45.7 — Mozilla

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object’s address can...

9.8CVSS9.2AI score0.33771EPSS
SaveExploits16References11Affected Software1
Mozilla
Mozilla
added 2016/11/15 12:00 a.m.49 views

Security vulnerabilities fixed in Firefox ESR 45.5 — Mozilla

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. Thi...

9.8CVSS9AI score0.12263EPSS
SaveExploits5References9Affected Software1
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.49 views

Type confusion in display transformation — Mozilla

Using the Address Sanitizer tool, security researcher Nils reported a type confusion flaw in display transformation during rendering due to incorrect bounds checking. This leads to a potentially exploitable crash and can be triggered by web content...

8.8CVSS1.6AI score0.02253EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.49 views

Use-after-free in service workers with nested sync events — Mozilla

Security researcher Looben Yang discovered a use-after-free vulnerability when working with nested sync event loops in Service Workers. He discovered a mechanism where scripts can close their own worker, which will then trigger a synchronization XMLHttpRequest on this now closed and released...

8.8CVSS2.3AI score0.03259EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2016/06/07 12:00 a.m.49 views

Miscellaneous memory safety hazards (rv:47.0 / rv:45.2) — Mozilla

Mozilla developers and community members reported several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these...

8.8CVSS2.4AI score0.03873EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2016/04/26 12:00 a.m.49 views

Elevation of privilege with chrome.tabs.update API in web extensions — Mozilla

Security researcher Muneaki Nishimura nishimunea of Recruit Technologies Co., Ltd. reported that the chrome.tabs.update API for web extensions allows for navigation to javascript: URLs without additional permissions. This can used to elevate privilege for a universal cross-site scripting XSS atta...

5.4CVSS6.4AI score0.01252EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Memory corruption with malicious NPAPI plugin — Mozilla

The CESG, the Information Security Arm of GCHQ, reported a dangling pointer dereference within the Netscape Plugin Application Programming Interface NPAPI that could lead to the NPAPI subsystem crashing. This issue requires a maliciously crafted NPAPI plugin in concert with scripted web content,...

8.8CVSS0.9AI score0.02928EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Service Worker Manager out-of-bounds read in Service Worker Manager — Mozilla

Security researcher Looben Yang reported a mechanism where the Clients API in Service Workers can be used to trigger an out-of-bounds read in ServiceWorkerManager. This results in a potentially exploitable crash...

8.8CVSS8.9AI score0.02947EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Local file overwriting and potential privilege escalation through CSP reports — Mozilla

Security researcher Nicolas Golubovic reported that a malicious page can overwrite files on the user's machine using Content Security Policy CSP violation reports. The file contents are restricted to the JSON format of the report. In many cases overwriting a local file may simply be destructive,...

8.8CVSS0.5AI score0.02331EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Addressbar spoofing though history navigation and Location protocol property — Mozilla

Security researcher Tsubasa Iinuma reported a mechanism where the displayed addressbar can be spoofed to users. This issue involves using history navigation in concert with the Location protocol property. After navigating from a malicious page to another, if the user navigates back to the initial...

4.3CVSS2AI score0.02208EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2015/09/22 12:00 a.m.49 views

Buffer overflow while decoding WebM video — Mozilla

Using the Address Sanitizer tool, security researcher Atte Kettunen discovered a buffer overflow in the nestegg library when decoding a WebM format video with maliciously formatted headers. This leads to a potentially exploitable crash...

6.8CVSS9.3AI score0.04774EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2015/09/22 12:00 a.m.49 views

Errors in the handling of CORS preflight request headers — Mozilla

Mozilla developer Ehsan Akhgari reported two issues with Cross-origin resource sharing CORS "preflight" requests...

6.4CVSS9.1AI score0.03095EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.49 views

Buffer overflow and out-of-bounds read while parsing MP4 video metadata — Mozilla

Security researcher laf.intel reported a buffer overflow and out-of-bounds read in the libstagefright library while parsing invalid metadata in MPEG4 video files. This can lead to a potentially exploitable crash...

6.8CVSS9.2AI score0.03488EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/03/31 12:00 a.m.49 views

Same-origin bypass through anchor navigation — Mozilla

Mozilla developer Olli Pettay reported that while investigating Mozilla Foundation Security Advisory 2015-28, he and Mozilla developer Boris Zbarsky found an alternate way to trigger a similar vulnerability. The previously reported flaw used an issue with SVG content navigation to bypass...

7.5CVSS8.8AI score0.03246EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2015/03/31 12:00 a.m.49 views

Add-on lightweight theme installation approval bypassed through MITM attack — Mozilla

Security researcher Armin Ebert discovered that a man-in-the-middle MITM attacker spoofing a Mozilla sub-domain could bypass user approval messages to install a Firefox lightweight theme. This was possible because add-on installations of the lightweight themes do not require the use of HTTP over...

4.3CVSS8.8AI score0.01261EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2015/01/13 12:00 a.m.49 views

Miscellaneous memory safety hazards (rv:35.0 / rv:31.4) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

7.5CVSS9.9AI score0.04109EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2014/10/14 12:00 a.m.49 views

Use-after-free interacting with text directionality — Mozilla

Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layout when interacting with text direction. This results in a crash which can lead to arbitrary code execution...

7.5CVSS9.4AI score0.04055EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2014/07/22 12:00 a.m.49 views

Use-after-free in DirectWrite font handling — Mozilla

Mozilla community member James Kitchener reported a crash in DirectWrite when rendering MathML content with specific fonts due to an error in how font resources and tables are handled. This leads to use-after-free of a DirectWrite font-face object, resulting in a potentially exploitable crash...

10CVSS8.9AI score0.04682EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2014/04/29 12:00 a.m.49 views

Use-after-free in imgLoader while resizing images — Mozilla

Security researcher Nils discovered a use-after-free error in which the imgLoader object is freed while an image is being resized. This results in a potentially exploitable crash...

9.3CVSS8AI score0.05614EPSS
SaveExploits1References2Affected Software4
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.49 views

Memory corruption in workers — Mozilla

Security researcher Nils used the Address Sanitizer tool while fuzzing to discover a memory corruption issue with the JavaScript engine when using workers with direct proxies. This results in a potentially exploitable crash...

10CVSS3.2AI score0.05166EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.49 views

Improperly initialized memory and overflows in some JavaScript functions — Mozilla

Compiler Engineer Dan Gohman of Google discovered a flaw in the JavaScript engine where memory was being incorrectly allocated for some functions and the calls for allocations were not always properly checked for overflow, leading to potential buffer overflows. When combined with other...

4.3CVSS3.3AI score0.02088EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.49 views

Use-after-free in HTML document templates — Mozilla

Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover a user-after-free when interacting with HTML document templates. This leads to a potentially exploitable crash...

10CVSS1.1AI score0.05416EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2013/09/17 12:00 a.m.49 views

NativeKey continues handling key messages after widget is destroyed — Mozilla

Mozilla developer Masayuki Nakano discovered that the NativeKey widget continues handling key messages even when it is destroyed by dispatched event listeners. This could result in some key events being applied to other objects or plugins if the widget memory is reallocated to them, leading to a...

4.3CVSS1.2AI score0.01795EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2013/09/17 12:00 a.m.49 views

Memory corruption involving scrolling — Mozilla

Security researcher Nils reported two potentially exploitable memory corruption bugs involving scrolling. The first was a use-after-free condition due to scrolling an image document. The second was due to nodes in a range request being added as children of two different parents...

10CVSS2.9AI score0.05391EPSS
SaveExploits0References4Affected Software5
Total number of security vulnerabilities1596