Aller au contenu

Vulnérabilités de Mozilla Firefox

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2017-5469 Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex Non notée 11 juin 2018
CVE-2017-5411 A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content Non notée 11 juin 2018
CVE-2017-5451 A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event Non notée 11 juin 2018
CVE-2017-5468 An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools Non notée 11 juin 2018
CVE-2017-5422 If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a… Non notée 11 juin 2018
CVE-2017-5442 A use-after-free vulnerability during changes in style when manipulating DOM elements Non notée 11 juin 2018
CVE-2017-5450 A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI Non notée 11 juin 2018
CVE-2017-5433 A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are… Non notée 11 juin 2018
CVE-2017-5382 Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for… Non notée 11 juin 2018
CVE-2017-5410 Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how… Non notée 11 juin 2018
CVE-2017-5402 A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been… Non notée 11 juin 2018
CVE-2017-5460 A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses… Non notée 11 juin 2018
CVE-2017-5421 A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user… Non notée 11 juin 2018
CVE-2017-5467 A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping… Non notée 11 juin 2018
CVE-2017-5449 A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with… Non notée 11 juin 2018
CVE-2017-5441 A use-after-free vulnerability when holding a selection during scroll events Non notée 11 juin 2018
CVE-2017-5381 The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a… Non notée 11 juin 2018
CVE-2017-5432 A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash Non notée 11 juin 2018
CVE-2017-5420 A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the… Non notée 11 juin 2018
CVE-2017-5392 Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in… Non notée 11 juin 2018
CVE-2017-5459 A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash Non notée 11 juin 2018
CVE-2017-5409 The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a… Non notée 11 juin 2018
CVE-2017-5401 A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error Non notée 11 juin 2018
CVE-2017-5448 An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content Non notée 11 juin 2018
CVE-2017-5458 When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed Non notée 11 juin 2018

Autres produits Mozilla