Aller au contenu

Vulnérabilités de Mozilla Firefox ESR

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2017-7755 The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer… Non notée 11 juin 2018
CVE-2017-7803 When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored Non notée 11 juin 2018
CVE-2017-7793 A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when… Non notée 11 juin 2018
CVE-2017-7764 Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the… Non notée 11 juin 2018
CVE-2017-7754 An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations Non notée 11 juin 2018
CVE-2017-7802 A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element Non notée 11 juin 2018
CVE-2017-7828 A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been… Non notée 11 juin 2018
CVE-2017-7792 A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely… Non notée 11 juin 2018
CVE-2017-7763 Default fonts on OS X display some Tibetan characters as whitespace Non notée 11 juin 2018
CVE-2017-7753 An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data Non notée 11 juin 2018
CVE-2017-7782 An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never… Non notée 11 juin 2018
CVE-2017-7801 A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing… Non notée 11 juin 2018
CVE-2017-7791 On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over… Non notée 11 juin 2018
CVE-2017-7819 A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during… Non notée 11 juin 2018
CVE-2017-7810 Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3 Non notée 11 juin 2018
CVE-2017-7752 A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages… Non notée 11 juin 2018
CVE-2017-7761 The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users Non notée 11 juin 2018
CVE-2017-7800 A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the… Non notée 11 juin 2018
CVE-2017-7818 A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA)… Non notée 11 juin 2018
CVE-2017-7751 A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash Non notée 11 juin 2018
CVE-2017-7760 The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it Non notée 11 juin 2018
CVE-2017-7779 Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2 Non notée 11 juin 2018
CVE-2017-7768 The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the… Non notée 11 juin 2018
CVE-2017-7798 The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page… Non notée 11 juin 2018
CVE-2017-7750 A use-after-free vulnerability during video control operations when a "" element holds a reference to an older window if… Non notée 11 juin 2018

Autres produits Mozilla