triomidwest.blogg.se - Firefox esr 24 free download

#Firefox esr 24 free download code#

#Firefox esr 24 free download code#

Buffer overflow at obsolete version of Network Security Service (NSS) can be exploited remotely via a specially designed certificate to cause denial of service or execute arbitrary code.

Out-of-bounds vulnerability at HTML parser can be exploited remotely via a specially unicode strings or XML and SVG content to cause denial of service or possibly execute arbitrary code.

Use-after-free vulnerability at WebRTC can be exploited remotely via a specially designed web content to cause denial of service or possibly execute arbitrary code.

A race condition at LibVPX potentially can be exploited remotely via a specially designed web content to cause denial of service or execute arbitrary code.

Deleted pointers usage at WebRTC potentially can be exploited remotely via a specially designed web content to cause denial of service or execute arbitrary code.

Multiple race conditions at WebRTC potentially can be exploited remotely via a specially designed web content to cause denial of service or execute arbitrary code.

Missing status check at WebRTC potentially can be exploited remotely via a specially designed web content to cause denial of service or execute arbitrary code (Windows).

An integer underflow at WebRTC possibly can be exploited remotely via a specially designed web content to cause denial of service or execute arbitrary code.

An improper pointer dereference at NPAPI can be exploited remotely via a specially designed plugin in concert with specially designed web content to cause denial of service or execute arbitrary code.

Pointer underflow at Brotli can be exploited remotely to cause denial of service or execute arbitrary code.

An unknown vulnerability can be exploited remotely via a specially designed redirect to bypass security restrictions.

An unknown vulnerability can be exploited remotely via sites navigation manipulations to spoof user interface.

Use-after-free vulnerability at XML transformation can be exploited remotely via a specially designed web content.

An unknown vulnerability at FileReader API can be exploited locally via files manipulation to cause denial of service or gain privileges.Use-after-free vulnerability at WebRTC can be exploited remotely to cause denial of service or execute arbitrary code.Use-after-free vulnerability at HTMLDocument can be exploited remotely via a specially designed content to cause denial of service or execute arbitrary code.Use-after-free vulnerability at HTML5 string parser can be exploited remotely via a specially designed content to cause denial of service or possibly execute arbitrary code.

An unknown vulnerability at Clients API in Service Workers can be exploited to cause denial of service or possibly execute arbitrary code.An unknown vulnerability can be exploited remotely via a specially designed JavaScript to spoof user interface.Memory leak at libstagefright can be exploited remotely via a specially designed MPEG4 video.Improper memory handling can be exploited remotely via a specially designed WebGL operations to cause denial of service (Linux).Lack of specification restrictions implementation at CSP violation reports can be exploited remotely to obtain sensitive information.Lack of report URI restrictions at Content Security Policy (CSP) violation reports can be exploited remotely via a specially designed page to overwrite arbitrary file.Multiple memory safety bugs at browser engine can be exploited remotely to cause denial of service and possibly execute arbitrary code.Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, gain privileges and write local files.īelow is a complete list of vulnerabilities Multiple serious vulnerabilities have been found in Mozilla Firefox.