firefox-l10n vulnerabilities (Mageia)
1,579 vulnerabilities.
firefox-l10nMageiaVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 Mediumfirefox-l10nMageiaUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 Mediumfirefox-l10nMageiaCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 Mediumfirefox-l10nMageiaA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 Criticalfirefox-l10nMageiaA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 Criticalfirefox-l10nMageiaA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 Criticalfirefox-l10nMageiaJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 Criticalfirefox-l10nMageiaMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 Criticalfirefox-l10nMageiaA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 Criticalfirefox-l10nMageiaThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 Criticalfirefox-l10nMageiaWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 Highfirefox-l10nMageiaURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 Mediumfirefox-l10nMageiaA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 Criticalfirefox-l10nMageiaHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 Highfirefox-l10nMageiaUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 Criticalfirefox-l10nMageiaJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 Criticalfirefox-l10nMageiaMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 Criticalfirefox-l10nMageiaA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 Highfirefox-l10nMageiaAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 Highfirefox-l10nMageiaThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 Highfirefox-l10nMageiaHTML tags received from the Pocket server will be processed without sanitization and any...9.8 Criticalfirefox-l10nMageiaExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 Highfirefox-l10nMageiaUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 Criticalfirefox-l10nMageiaUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 Criticalfirefox-l10nMageiaMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 Highfirefox-l10nMageiaEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 Mediumfirefox-l10nMageiaMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 Criticalfirefox-l10nMageiaA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 Highfirefox-l10nMageiaAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 Mediumfirefox-l10nMageiaA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 Highfirefox-l10nMageiaAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Mediumfirefox-l10nMageiaAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Criticalfirefox-l10nMageiaA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 Highfirefox-l10nMageiaA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 Mediumfirefox-l10nMageiaMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 Criticalfirefox-l10nMageiaMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 Highfirefox-l10nMageiaUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 Criticalfirefox-l10nMageiaUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 Criticalfirefox-l10nMageiaHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 Highfirefox-l10nMageiaUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 Criticalfirefox-l10nMageiaUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 Criticalfirefox-l10nMageiaUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 Criticalfirefox-l10nMageiaThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 Highfirefox-l10nMageiaHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 Criticalfirefox-l10nMageiaMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 Criticalfirefox-l10nMageiaMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 Mediumfirefox-l10nMageiaUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 Highfirefox-l10nMageiaThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 Highfirefox-l10nMageiaMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 Mediumfirefox-l10nMageiaInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 High- Show moreLoading…