Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox esr 38.5.0 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2016-2804
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 46.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.5.2Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla FirefoxMozilla Firefox Esr 38.7.1Mozilla Firefox Esr 38.7.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1
8.8
CVSSv3
CVE-2016-1952
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vector...
Oracle Linux 6Oracle Linux 5.0Oracle Linux 7Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1
8.8
CVSSv3
CVE-2016-1953
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.c...
Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxNovell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1
8.8
CVSSv3
CVE-2016-1954
The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote malicious users to c...
Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla FirefoxMozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Mozilla ThunderbirdMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Oracle Linux 6Oracle Linux 5.0Oracle Linux 7
4.3
CVSSv3
CVE-2016-1957
Memory leak in libstagefright in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
Opensuse Leap 42.1Opensuse Opensuse 13.2Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Opensuse 13.1Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Oracle Linux 7Oracle Linux 5.0Oracle Linux 6
4.3
CVSSv3
CVE-2016-1958
browser/base/content/browser.js in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to spoof the address bar via a javascript: URL.
Oracle Linux 5.0Oracle Linux 6Oracle Linux 7Opensuse Opensuse 13.1Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla FirefoxMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0
8.8
CVSSv3
CVE-2016-1960
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end ...
Oracle Linux 5.0Oracle Linux 6Oracle Linux 7Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla ThunderbirdMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Opensuse Opensuse 13.2Opensuse Opensuse 13.1Suse Linux Enterprise 12.0Opensuse Leap 42.1
8.8
CVSSv3
CVE-2016-1969
The setAttr function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.6.1, allows remote malicious users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smar...
Sil Graphite2Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla FirefoxMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0
8.8
CVSSv3
CVE-2016-2792
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via...
Sil Graphite2Mozilla FirefoxMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Oracle Linux 5.0Oracle Linux 7Oracle Linux 6Suse Linux Enterprise 12.0Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1
8.8
CVSSv3
CVE-2016-2793
CachedCmap.cpp in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
Oracle Linux 6Oracle Linux 5.0Oracle Linux 7Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Sil Graphite2Suse Linux Enterprise 12.0Opensuse Opensuse 13.1Opensuse Leap 42.1Opensuse Opensuse 13.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook