Lucene search
+L
MozillaMost viewed

1596 matches found

Mozilla
Mozilla
added 2015/08/11 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:40.0 / rv:38.2) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

10CVSS8.4AI score0.06963EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.50 views

Use-after-free due to Media Decoder Thread creation during shutdown — Mozilla

Security researchers Tyson Smith and Jesse Schwartzentruber reported a use-after-free during the shutdown process. This was caused by a race condition when media decoder threads are created during the shutdown process in some circumstances. This leads to a potentially exploitable crash when...

6.8CVSS8.9AI score0.0218EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:38.0 / rv:31.7) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

7.5CVSS9.8AI score0.04875EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.50 views

Malicious WebGL content crash when writing strings — Mozilla

Security researcher Daniele Di Proietto discovered that when WebGL content crafted in a specific manner wrote strings, it would cause a crash when this content was run...

5CVSS8.8AI score0.02013EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.50 views

TLS TURN and STUN connections silently fail to simple TCP connections — Mozilla

Security researcher Alexander Kolesnik reported while the Mozilla platform does not yet support TLS connections to TURN and STUN servers, the WebRTC implementation would accept turns: and stuns: URIs and then attempt plaintext connections to the servers when these were used. This can lead to...

4.3CVSS8.9AI score0.01259EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.50 views

Buffer overflow during CSS restyling — Mozilla

Security researcher Atte Kettunen used the Address Sanitizer tool to discover an out-of-bounds read during the application of restyling and reflowing changes of web content using CSS. This results in a potentially exploitable crash...

6.8CVSS8.8AI score0.03381EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2014/12/02 12:00 a.m.50 views

Use-after-free during HTML5 parsing — Mozilla

Security researcher SkyLined reported a use-after-free created by triggering the creation of a second root element while parsing HTML written to a document created with document.open. This leads to a potentially exploitable crash...

6.8CVSS5.9AI score0.03377EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2014/10/14 12:00 a.m.50 views

Web Audio memory corruption issues with custom waveforms — Mozilla

Security researcher Holger Fuhrmannek used the used the Address Sanitizer tool to discover an out-of-bounds read issue with Web Audio when interacting with custom waveforms with invalid values. This results in a crash and could allow for the reading of random memory which may contain sensitive...

6.4CVSS8.8AI score0.02896EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2014/07/22 12:00 a.m.50 views

Use-after-free with FireOnStateChange event — Mozilla

Security researcher Jethro Beekman of the University of California, Berkeley reported a crash when the FireOnStateChange event is triggered in some circumstances. This leads to a use-after-free and a potentially exploitable crash when it occurs...

9.3CVSS9AI score0.04907EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.50 views

Spoofing addressbar though SELECT element — Mozilla

Security researcher Jordi Chancel discovered a method to put arbitrary HTML content within elements and place it in arbitrary locations. This can be used to spoof the displayed addressbar, leading to clickjacking and other spoofing attacks...

4.3CVSS1.1AI score0.01993EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2013/09/17 12:00 a.m.50 views

Shared object library loading from writable location — Mozilla

Mozilla developer Vladimir Vukicevic reported that Firefox for Android will optionally load a shared object .so library in order to enable GL tracing. When this is occurs, it can be from a world writable location, allowing for it to be replaced by malicious third party applications before it is...

6.8CVSS6.1AI score0.01823EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2013/06/25 12:00 a.m.50 views

X-Frame-Options ignored when using server push with multi-part responses — Mozilla

Bugzilla developer Frédéric Buclin reported that the X-Frame-Options header is ignored when server push is used in multi-part responses. This can lead to potential clickjacking on sites that use X-Frame-Options as a protection...

4CVSS1.3AI score0.01661EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2013/04/02 12:00 a.m.50 views

Privilege escalation through Mozilla Maintenance Service — Mozilla

Security researcher Frédéric Hoguin discovered that the Mozilla Maintenance Service on Windows was vulnerable to a buffer overflow. This system is used to update software without invoking the User Account Control UAC prompt. The Mozilla Maintenance Service is configured to allow unprivileged user...

7.2CVSS6.7AI score0.00388EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2012/10/11 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:16.0.1) — Mozilla

Mozilla developers identified and fixed two top crashing bugs in the browser engine used in Firefox and other Mozilla-based products. These bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to ru...

10CVSS9.6AI score0.04199EPSS
SaveExploits0References4Affected Software3
Mozilla
Mozilla
added 2011/12/20 12:00 a.m.50 views

Crash when plugin removes itself on Mac OS X — Mozilla

FireBreath developer Richard Bateman reported a crash on Mac OS X that occurred when a plugin deletes its containing DOM frame during a call from that frame. The observed symptom is a null dereference but we cannot rule out the possibility that content from a scriptable plugin such as Flash could...

6.8CVSS5.8AI score0.01307EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2011/04/28 12:00 a.m.50 views

WebGLES vulnerabilities — Mozilla

Two crashes that could potentially be exploited to run malicious code were found in the WebGL feature and fixed in Firefox 4.0.1. In addition the WebGLES libraries could potentially be used to bypass a security feature of recent Windows versions. The WebGL feature was introduced in Firefox 4; old...

10CVSS6.2AI score0.03284EPSS
SaveExploits1References5Affected Software1
Mozilla
Mozilla
added 2011/03/01 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17) — Mozilla

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

10CVSS3.1AI score0.05787EPSS
SaveExploits0References4Affected Software3
Mozilla
Mozilla
added 2010/12/09 12:00 a.m.50 views

Add support for OTS font sanitizer — Mozilla

Mozilla added the OTS font sanitizing library to prevent downloadable fonts from exposing vulnerabilities in the underlying OS font code. This library mitigates against several issues independently reported by Red Hat Security Response Team member Marc Schoenefeld and Mozilla security researcher...

9.3CVSS0.5AI score0.04812EPSS
SaveExploits0References3Affected Software3
Mozilla
Mozilla
added 2010/09/07 12:00 a.m.50 views

Crash and remote code execution in normalizeDocument — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that code used to normalize a document contained a logical flaw that could be leveraged to run arbitrary code. When the normalization code ran, a static count of the document's child nodes was used in the traversal, so...

9.3CVSS2AI score0.05366EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2010/03/30 12:00 a.m.50 views

Image src redirect to mailto: URL opens email editor — Mozilla

phpBB developer Henry Sudhof reported that when an image tag points to a resource that redirects to a mailto: URL, the external mail handler application is launched. This issue poses no security threat to users but could create an annoyance when browsing a site that allows users to post arbitrary...

4.3CVSS1.6AI score0.02219EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2009/08/01 12:00 a.m.50 views

Compromise of SSL-protected communication — Mozilla

IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities CA which issue server certificates. In particular, if a malicious person requested a certificate for a host name with an invalid...

6.8CVSS1.6AI score0.04959EPSS
SaveExploits4References3Affected Software4
Mozilla
Mozilla
added 2008/07/01 12:00 a.m.50 views

Crash and remote code execution in block reflow — Mozilla

Security research firm Astabis reported a vulnerability in Firefox 2 submitted through the iSIGHT Partners GVP Program by Greg McManus, Primary GVP Researcher. The reported crash in Mozilla's block reflow code could be used by an attacker to crash the browser and run arbitrary code on the victim'...

10CVSS3.8AI score0.07081EPSS
SaveExploits1References3Affected Software3
Mozilla
Mozilla
added 2008/07/01 12:00 a.m.50 views

Peer-trusted certs can use alt names to spoof — Mozilla

Mozilla developer John G. Myers reported a weakness in the trust model used by Mozilla regarding alternate names on self-signed certificates and those with mismatched names that if accepted could be used to spoof a secure connection to any other site. This problem was independently reported by...

4CVSS2.1AI score0.0124EPSS
SaveExploits1References2Affected Software3
Mozilla
Mozilla
added 2007/10/18 12:00 a.m.50 views

Digest authentication request splitting — Mozilla

Security researcher Stefano Di Paola reported that Firefox did not properly validate the user ID when making an HTTP request using Digest Authentication to log into a web site. A malicious page could abuse this to inject arbitrary HTTP headers by including a newline character in the user ID...

4.3CVSS1AI score0.12736EPSS
SaveExploits1References3Affected Software2
Mozilla
Mozilla
added 2007/05/30 12:00 a.m.50 views

Security Vulnerability in APOP Authentication — Mozilla

Gaëtan Leurent informed us of a weakness in APOP authentication that could allow an attacker to recover the first part of your mail password if the attacker could interpose a malicious mail server on your network masquerading as your legitimate mail server. With normal settings it could take...

2.6CVSS2.1AI score0.02423EPSS
SaveExploits1References4Affected Software2
Mozilla
Mozilla
added 2006/04/13 12:00 a.m.50 views

Privilege escalation through Print Preview — Mozilla

Georgi Guninski reported two variants of using scripts in an XBL control to gain chrome privileges when the page is viewed under "Print Preview"...

7.6CVSS3.1AI score0.06371EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2024/10/01 12:00 a.m.49 views

Security Vulnerabilities fixed in Firefox 131 — Mozilla

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible.This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffecte...

9.8CVSS8.2AI score0.00587EPSS
SaveExploits0References14Affected Software1
Mozilla
Mozilla
added 2023/05/09 12:00 a.m.49 views

Security Vulnerabilities fixed in Firefox ESR 102.11 — Mozilla

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. An out-of-bound read could have led to a crash in the RLBox Expat driver. A missing delay in popup notifications could have made it...

8.8CVSS7.4AI score0.00918EPSS
SaveExploits0References9Affected Software1
Mozilla
Mozilla
added 2020/12/01 12:00 a.m.49 views

Security Vulnerabilities fixed in Thunderbird 78.5.1 — Mozilla

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable...

9.3CVSS1.9AI score0.01247EPSS
SaveExploits0References1Affected Software1
Mozilla
Mozilla
added 2017/01/24 12:00 a.m.49 views

Security vulnerabilities fixed in Firefox ESR 45.7 — Mozilla

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object’s address can...

9.8CVSS9.2AI score0.33771EPSS
SaveExploits16References11Affected Software1
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.49 views

Type confusion in display transformation — Mozilla

Using the Address Sanitizer tool, security researcher Nils reported a type confusion flaw in display transformation during rendering due to incorrect bounds checking. This leads to a potentially exploitable crash and can be triggered by web content...

8.8CVSS1.6AI score0.02253EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.49 views

Use-after-free in service workers with nested sync events — Mozilla

Security researcher Looben Yang discovered a use-after-free vulnerability when working with nested sync event loops in Service Workers. He discovered a mechanism where scripts can close their own worker, which will then trigger a synchronization XMLHttpRequest on this now closed and released...

8.8CVSS2.3AI score0.03259EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2016/06/07 12:00 a.m.49 views

Miscellaneous memory safety hazards (rv:47.0 / rv:45.2) — Mozilla

Mozilla developers and community members reported several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these...

8.8CVSS2.4AI score0.03873EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2016/04/26 12:00 a.m.49 views

Elevation of privilege with chrome.tabs.update API in web extensions — Mozilla

Security researcher Muneaki Nishimura nishimunea of Recruit Technologies Co., Ltd. reported that the chrome.tabs.update API for web extensions allows for navigation to javascript: URLs without additional permissions. This can used to elevate privilege for a universal cross-site scripting XSS atta...

5.4CVSS6.4AI score0.01252EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Memory corruption with malicious NPAPI plugin — Mozilla

The CESG, the Information Security Arm of GCHQ, reported a dangling pointer dereference within the Netscape Plugin Application Programming Interface NPAPI that could lead to the NPAPI subsystem crashing. This issue requires a maliciously crafted NPAPI plugin in concert with scripted web content,...

8.8CVSS0.9AI score0.02928EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Local file overwriting and potential privilege escalation through CSP reports — Mozilla

Security researcher Nicolas Golubovic reported that a malicious page can overwrite files on the user's machine using Content Security Policy CSP violation reports. The file contents are restricted to the JSON format of the report. In many cases overwriting a local file may simply be destructive,...

8.8CVSS0.5AI score0.02331EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2016/03/08 12:00 a.m.49 views

Addressbar spoofing though history navigation and Location protocol property — Mozilla

Security researcher Tsubasa Iinuma reported a mechanism where the displayed addressbar can be spoofed to users. This issue involves using history navigation in concert with the Location protocol property. After navigating from a malicious page to another, if the user navigates back to the initial...

4.3CVSS2AI score0.02208EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2016/01/26 12:00 a.m.49 views

Delay following click events in file download dialog too short on OS X — Mozilla

Security researcher Jordi Chancel reported an issue on OS X where the delay between the download dialog getting focus and the button getting enabled was too short. If an attacker is able to induce the user to double-click in a specific location, they can then pass the second click through to the...

6.1CVSS7.6AI score0.00854EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2015/09/22 12:00 a.m.49 views

Buffer overflow while decoding WebM video — Mozilla

Using the Address Sanitizer tool, security researcher Atte Kettunen discovered a buffer overflow in the nestegg library when decoding a WebM format video with maliciously formatted headers. This leads to a potentially exploitable crash...

6.8CVSS9.3AI score0.04774EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2015/09/22 12:00 a.m.49 views

Errors in the handling of CORS preflight request headers — Mozilla

Mozilla developer Ehsan Akhgari reported two issues with Cross-origin resource sharing CORS "preflight" requests...

6.4CVSS9.1AI score0.03095EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.49 views

Buffer overflow and out-of-bounds read while parsing MP4 video metadata — Mozilla

Security researcher laf.intel reported a buffer overflow and out-of-bounds read in the libstagefright library while parsing invalid metadata in MPEG4 video files. This can lead to a potentially exploitable crash...

6.8CVSS9.2AI score0.03488EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/03/31 12:00 a.m.49 views

Same-origin bypass through anchor navigation — Mozilla

Mozilla developer Olli Pettay reported that while investigating Mozilla Foundation Security Advisory 2015-28, he and Mozilla developer Boris Zbarsky found an alternate way to trigger a similar vulnerability. The previously reported flaw used an issue with SVG content navigation to bypass...

7.5CVSS8.8AI score0.03246EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2015/03/31 12:00 a.m.49 views

Out of bounds read in QCMS library — Mozilla

Security researcher Felix Gröbert of Google used the Address Sanitizer tool to discover an out of bounds read in the QCMS color management library while transforming images with certain parameters. This could lead to information disclosure...

6.4CVSS8.4AI score0.02795EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/03/31 12:00 a.m.49 views

Add-on lightweight theme installation approval bypassed through MITM attack — Mozilla

Security researcher Armin Ebert discovered that a man-in-the-middle MITM attacker spoofing a Mozilla sub-domain could bypass user approval messages to install a Firefox lightweight theme. This was possible because add-on installations of the lightweight themes do not require the use of HTTP over...

4.3CVSS8.8AI score0.01261EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2015/01/13 12:00 a.m.49 views

Miscellaneous memory safety hazards (rv:35.0 / rv:31.4) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

7.5CVSS9.9AI score0.04109EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2014/10/14 12:00 a.m.49 views

Use-after-free interacting with text directionality — Mozilla

Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layout when interacting with text direction. This results in a crash which can lead to arbitrary code execution...

7.5CVSS9.4AI score0.04055EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2014/07/22 12:00 a.m.49 views

Use-after-free in DirectWrite font handling — Mozilla

Mozilla community member James Kitchener reported a crash in DirectWrite when rendering MathML content with specific fonts due to an error in how font resources and tables are handled. This leads to use-after-free of a DirectWrite font-face object, resulting in a potentially exploitable crash...

10CVSS8.9AI score0.04682EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2014/04/29 12:00 a.m.49 views

Use-after-free in imgLoader while resizing images — Mozilla

Security researcher Nils discovered a use-after-free error in which the imgLoader object is freed while an image is being resized. This results in a potentially exploitable crash...

9.3CVSS8AI score0.05614EPSS
SaveExploits1References2Affected Software4
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.49 views

Memory corruption in workers — Mozilla

Security researcher Nils used the Address Sanitizer tool while fuzzing to discover a memory corruption issue with the JavaScript engine when using workers with direct proxies. This results in a potentially exploitable crash...

10CVSS3.2AI score0.05166EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2013/10/29 12:00 a.m.49 views

Improperly initialized memory and overflows in some JavaScript functions — Mozilla

Compiler Engineer Dan Gohman of Google discovered a flaw in the JavaScript engine where memory was being incorrectly allocated for some functions and the calls for allocations were not always properly checked for overflow, leading to potential buffer overflows. When combined with other...

4.3CVSS3.3AI score0.02088EPSS
SaveExploits0References2Affected Software5
Total number of security vulnerabilities1596