Aller au contenu

Vulnérabilités de Mozilla Firefox ESR

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2017-5410 Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how… Non notée 11 juin 2018
CVE-2017-5402 A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been… Non notée 11 juin 2018
CVE-2017-5460 A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses… Non notée 11 juin 2018
CVE-2017-5467 A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping… Non notée 11 juin 2018
CVE-2017-5449 A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with… Non notée 11 juin 2018
CVE-2017-5441 A use-after-free vulnerability when holding a selection during scroll events Non notée 11 juin 2018
CVE-2017-5432 A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash Non notée 11 juin 2018
CVE-2017-5459 A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash Non notée 11 juin 2018
CVE-2017-5409 The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a… Non notée 11 juin 2018
CVE-2017-5401 A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error Non notée 11 juin 2018
CVE-2017-5448 An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content Non notée 11 juin 2018
CVE-2017-5440 A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching… Non notée 11 juin 2018
CVE-2017-5430 Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52 Non notée 11 juin 2018
CVE-2017-5380 A potential use-after-free found through fuzzing during DOM manipulation of SVG content Non notée 11 juin 2018
CVE-2017-5408 Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such… Non notée 11 juin 2018
CVE-2017-5400 JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to… Non notée 11 juin 2018
CVE-2017-5456 A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an… Non notée 11 juin 2018
CVE-2017-5447 An out-of-bounds read during the processing of glyph widths during text layout Non notée 11 juin 2018
CVE-2017-5429 Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52 Non notée 11 juin 2018
CVE-2017-5439 A use-after-free vulnerability during XSLT processing due to poor handling of template parameters Non notée 11 juin 2018
CVE-2017-5390 The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing… Non notée 11 juin 2018
CVE-2017-5446 An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content Non notée 11 juin 2018
CVE-2017-5407 Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract… Non notée 11 juin 2018
CVE-2017-5378 Hashed codes of JavaScript objects are shared between pages Non notée 11 juin 2018
CVE-2017-5428 An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest Non notée 11 juin 2018

Autres produits Mozilla