mozilla firefox esr 52.0 vulnerabilities and exploits

(subscribe to this query)

A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28....

Debian Debian Linux 8.0 Mozilla Firefox Esr Mozilla Thunderbird Mozilla Firefox Mozilla Network Security Services Mozilla Firefox Esr 52.0

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Server Eus 7.5 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server Aus 7.3 Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Eus 7.4 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Workstation 7.0 Debian Debian Linux 8.0 Mozilla Firefox Esr Mozilla Firefox Mozilla Thunderbird

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunde...

A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52...

1 EDB exploit

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and ...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook