| CVE-2017-5427 |
A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory
|
Non notée
|
11 juin 2018 |
| CVE-2017-5416 |
In certain circumstances a networking event listener can be prematurely released
|
Non notée
|
11 juin 2018 |
| CVE-2017-5388 |
A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5397 |
The cache directory on the local file system is set to be world writable
|
Non notée
|
11 juin 2018 |
| CVE-2017-5415 |
An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol,…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5387 |
The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5426 |
On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5405 |
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations
|
Non notée
|
11 juin 2018 |
| CVE-2017-5376 |
Use-after-free while manipulating XSL in XSLT documents
|
Non notée
|
11 juin 2018 |
| CVE-2017-5436 |
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font
|
Non notée
|
11 juin 2018 |
| CVE-2017-5396 |
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5386 |
WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol,…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5414 |
The file picker dialog can choose and display the wrong local default directory when instantiated
|
Non notée
|
11 juin 2018 |
| CVE-2017-5425 |
The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions
|
Non notée
|
11 juin 2018 |
| CVE-2017-5404 |
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5385 |
Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5375 |
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks
|
Non notée
|
11 juin 2018 |
| CVE-2017-5413 |
A segmentation fault can occur during some bidirectional layout operations
|
Non notée
|
11 juin 2018 |
| CVE-2017-5394 |
A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5384 |
Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5403 |
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5374 |
Memory safety bugs were reported in Firefox 50.1
|
Non notée
|
11 juin 2018 |
| CVE-2017-5393 |
The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5383 |
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display,…
|
Non notée
|
11 juin 2018 |
| CVE-2017-5373 |
Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6
|
Non notée
|
11 juin 2018 |