Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox esr 38.7.0 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2016-2804
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 46.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.5.2Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla FirefoxMozilla Firefox Esr 38.7.1Mozilla Firefox Esr 38.7.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1
8.8
CVSSv3
CVE-2016-1966
The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corrupt...
Oracle Linux 5.0Oracle Linux 7Oracle Linux 6Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla FirefoxMozilla ThunderbirdOpensuse Opensuse 13.1
8.8
CVSSv3
CVE-2016-1960
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end ...
Oracle Linux 5.0Oracle Linux 6Oracle Linux 7Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla ThunderbirdMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Opensuse Opensuse 13.2Opensuse Opensuse 13.1Suse Linux Enterprise 12.0Opensuse Leap 42.1
4.3
CVSSv3
CVE-2016-1957
Memory leak in libstagefright in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
Opensuse Leap 42.1Opensuse Opensuse 13.2Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Opensuse 13.1Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Oracle Linux 7Oracle Linux 5.0Oracle Linux 6
8.8
CVSSv3
CVE-2016-2795
The graphite2::FileFace::get_table_fn function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, does not initialize memory for an unspecified data structure, which allows remote malicious users to cause a denial of service...
Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise 12.0Opensuse Opensuse 13.1Oracle Linux 6Oracle Linux 5.0Oracle Linux 7Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Sil Graphite2
8.8
CVSSv3
CVE-2016-2796
Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service or possibly have unspecified other i...
Sil Graphite2Opensuse Opensuse 13.2Opensuse Leap 42.1Suse Linux Enterprise 12.0Opensuse Opensuse 13.1Oracle Linux 7Oracle Linux 6Oracle Linux 5.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0
8.8
CVSSv3
CVE-2016-2797
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact...
Oracle Linux 5.0Oracle Linux 7Oracle Linux 6Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla FirefoxMozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Opensuse Opensuse 13.2Opensuse Leap 42.1Suse Linux Enterprise 12.0Opensuse Opensuse 13.1Sil Graphite2
8.8
CVSSv3
CVE-2016-2799
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via ...
Oracle Linux 5.0Oracle Linux 7Oracle Linux 6Opensuse Opensuse 13.1Opensuse Opensuse 13.2Suse Linux Enterprise 12.0Opensuse Leap 42.1Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Sil Graphite2
8.8
CVSSv3
CVE-2016-2801
The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecifi...
Opensuse Opensuse 13.1Opensuse Opensuse 13.2Opensuse Leap 42.1Suse Linux Enterprise 12.0Sil Graphite2Oracle Linux 7Oracle Linux 5.0Oracle Linux 6Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1
8.8
CVSSv3
CVE-2016-2790
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, does not initialize memory for an unspecified data structure, which allows remote malicious users to cause a denial of service ...
Suse Linux Enterprise 12.0Opensuse Opensuse 13.2Opensuse Leap 42.1Opensuse Opensuse 13.1Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Sil Graphite2Oracle Linux 5.0Oracle Linux 6Oracle Linux 7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook