Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox ESR und Mozilla Firefox ausnutzen, um Benutzer zu täuschen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, beliebigen Programmcode mit den Rechten des Angegriffenen auszuführen und einen Denial of Service Zustand herbeizuführen.
Product
Firefox und Mozilla sind Open Source Web Browser. ESR ist die Variante mit verlängertem Support.
Vulnerabilities 29
-
Unscored —
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style dat…
-
Unscored —
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evide…
-
Unscored —
Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can…
-
Unscored —
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected,…
-
Unscored —
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@exampl…
-
Unscored —
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer …
-
Unscored —
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. T…
-
Unscored —
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a p…
-
Unscored —
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes…
-
Unscored —
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit t…
-
Unscored —
If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid…
-
Unscored —
On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, …
-
Unscored —
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary…
-
Unscored —
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely …
-
Unscored —
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even thoug…
-
Unscored —
On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to writ…
-
Unscored —
Response header name interning does not have same-origin protections and these headers are stored in a global registry.…
-
Unscored —
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page sou…
-
Unscored —
JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is sup…
-
Unscored —
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disco…
-
Unscored —
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where…
-
Unscored —
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If thes…
-
Unscored —
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This r…
-
Unscored —
The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with an…
-
Unscored —
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content,…
-
Unscored —
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the d…
-
Unscored —
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons agains…
-
Unscored —
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while sti…
Revision history
-
#16
Neue Updates von XEROX aufgenommen
-
#15
Neue Updates von SUSE aufgenommen
-
#14
Added references
-
#12
New remediations available
-
#13
Version nicht vorhanden
-
#10
New remediations available
-
#11
Version nicht vorhanden
-
#9
New remediations available
-
#8
New remediations available
-
#6
New remediations available
-
#7
New remediations available
-
#5
New remediations available
-
#4
New remediations available
-
#3
New remediations available
-
#1
Initial Release
-
#2
Version nicht vorhanden
References
-
Mozilla Foundation Security Advisory mfsa2017-19 vom 2017-08-08
https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/
-
Mozilla Foundation Security Advisory mfsa2017-18 vom 2017-08-08
https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/
-
Debian Security Advisory DSA-3928-1 vom 2017-08-10
https://lists.debian.org/debian-security-announce/2017/msg00190.html
-
Red Hat Security Advisory RHSA-2017:2456 vom 2017-08-11
https://access.redhat.com/errata/RHSA-2017:2456
-
Oracle Linux Security Advisory ELSA-2017-2456 vom 2017-08-11
http://linux.oracle.com/errata/ELSA-2017-2456.html
-
Ubuntu Security Notice USN-3391-1 vom 2017-08-16
http://www.ubuntu.com/usn/usn-3391-1/
-
CentOS-announce CESA-2017:2456 vom 2017-08-15
https://lists.centos.org/pipermail/centos-announce/2017-August/022516.html
-
Red Hat Security Advisory RHSA-2017:2534 vom 2017-08-24
https://access.redhat.com/errata/RHSA-2017:2534
-
CentOS-announce CESA-2017:2534 vom 2017-08-31
https://lists.centos.org/pipermail/centos-announce/2017-August/022528.html
-
Debian Security Advisory DSA-3968 vom 2017-09-12
https://www.debian.org/security/2017/dsa-3968
-
SUSE Security Update SUSE-SU-2017:2589-1 vom 2017-09-28
https://www.suse.com/support/update/announcement/2017/suse-su-20172589-1.html
-
Meldung WLB-2017100156 auf CXSecurity vom 2017-10-21
https://cxsecurity.com/issue/WLB-2017100156
-
GENTOO Security Advisory GLSA201803-14 vom 2018-04-04
https://security.gentoo.org/glsa/201803-14
-
SUSE Security Update SUSE-SU-2019:2872-1 vom 2019-10-31
https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html
-
XEROX Security Advisory XRX25-012 vom 2025-06-02
https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf