Aller au contenu

Vulnérabilités de Mozilla Firefox ESR

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2017-7767 The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using… Non notée 11 juin 2018
CVE-2017-7778 A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads… Non notée 11 juin 2018
CVE-2017-7787 Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the… Non notée 11 juin 2018
CVE-2017-7758 An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while… Non notée 11 juin 2018
CVE-2017-7749 A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell Non notée 11 juin 2018
CVE-2017-7766 An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation… Non notée 11 juin 2018
CVE-2017-7757 A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still… Non notée 11 juin 2018
CVE-2017-7756 A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR) Non notée 11 juin 2018
CVE-2017-5466 If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL,… Non notée 11 juin 2018
CVE-2017-5465 An out-of-bounds read while processing SVG content in "ConvolvePixel" Non notée 11 juin 2018
CVE-2017-5455 The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of… Non notée 11 juin 2018
CVE-2017-5472 A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when… Non notée 11 juin 2018
CVE-2017-5445 A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to… Non notée 11 juin 2018
CVE-2017-5464 During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the… Non notée 11 juin 2018
CVE-2017-5454 A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files… Non notée 11 juin 2018
CVE-2017-5435 A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions Non notée 11 juin 2018
CVE-2017-5444 A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains… Non notée 11 juin 2018
CVE-2017-5470 Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1 Non notée 11 juin 2018
CVE-2017-5462 A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does… Non notée 11 juin 2018
CVE-2017-5434 A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash Non notée 11 juin 2018
CVE-2017-5443 An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives Non notée 11 juin 2018
CVE-2017-5469 Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex Non notée 11 juin 2018
CVE-2017-5451 A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event Non notée 11 juin 2018
CVE-2017-5442 A use-after-free vulnerability during changes in style when manipulating DOM elements Non notée 11 juin 2018
CVE-2017-5433 A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are… Non notée 11 juin 2018

Autres produits Mozilla