Advisories · Technology
Mozilla Firefox ESR.
Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Thunderbird: A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Thunderbird: The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: When a page's content security policy (CSP) header contains a "sandbox" directive…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating the DOM during the resize…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability can occur while re-computing layout for a "marquee"…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability can occur in WebSockets when the object holding the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: The Developer Tools feature suffers from a XUL injection vulnerability due to improper…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: A use-after-free vulnerability can occur in the Fetch API when the worker or the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow will occur when viewing a certificate in the certificate manager if the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: On pages containing an iframe, the "data:" protocol can be used to create a modal alert…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Same-origin policy protections can be bypassed on pages with embedded iframes during page…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow can occur when manipulating Accessible Rich Internet Applications…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: An attack using manipulation of "updater.ini" contents…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: The "Mark of the Web" was not correctly saved on Windows when files with very long names…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Characters from the "Canadian Syllabics" unicode block can be mixed with characters from…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Default fonts on OS X display some Tibetan characters as whitespace.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: The Mozilla Maintenance Service "helper.exe" application creates a temporary directory…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: The Mozilla Windows updater modifies some files to be updated by reading the original…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: An out-of-bounds read vulnerability with the Opus encoder when the number of channels in…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free and use-after-scope vulnerability when logging errors from headers for…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: The Firefox installer on Windows can be made to load malicious DLL files stored in the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An out-of-bounds read occurs when applying style rules to pseudo-elements…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability during specific user interactions with the input method…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability with content viewer listeners that results in a…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability during video control operations when a "<track>" element…
- Mozilla Firefox
- Mozilla Firefox ESR
-
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability with the frameloader during tree reconstruction while…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A potential memory corruption and crash when using Skia content when drawing content…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: If a page is loaded from an original site through a hyperlink and contains a redirect to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An out-of-bounds read while processing SVG content in "ConvolvePixel".
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: During DOM manipulations of the accessibility tree through script…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A flaw in DRBG number generation within the Network Security Services (NSS) library where…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability in frame selection triggered by a combination of malicious…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: A mechanism to bypass file system access protections in the sandbox using the file system…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Thunderbird: A mechanism to bypass file system access protections in the sandbox to use the file…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A mechanism to spoof the addressbar through the user interaction on the addressbar and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A possibly exploitable crash triggered during layout and manipulation of bidirectional…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted…
- Mozilla Firefox ESR
- Mozilla Firefox
-
An out-of-bounds read during the processing of glyph widths during text layout.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A vulnerability while parsing "application/http-index-format" format content where…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow vulnerability while parsing "application/http-index-format" format…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A use-after-free vulnerability during changes in style when manipulating DOM elements.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A use-after-free vulnerability when holding a selection during scroll events.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability during XSLT processing due to a failure to propagate error…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters.
- Mozilla Thunderbird
- Mozilla Firefox ESR