Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | firefox-esr | 52.8.0esr-1~deb7u1 |
Vulnerabilities 9
-
High 8.8
Malicious PDF can inject JavaScript into PDF Viewer
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability af…
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This resul…
-
Unscored —
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in …
-
Unscored —
Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for t…
-
Unscored —
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks…
-
Unscored —
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of…
-
Unscored —
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of …
-
Unscored —
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues incl…