TI-2019-12708 CVE-2019-17025 · GHSA-pmcc-4v53-j538
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in Firefox 71.
Vulnerabilities
7 records
TI-2019-12707 CVE-2019-17024 · GHSA-r596-hj6g-g56c
Out-of-bounds write in Mozilla Firefox ESR
Priority MEDIUM 43
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.
TI-2019-12706 CVE-2019-17023 · GHSA-86rq-87v9-7ppc
Improper authentication in Mozilla Firefox
Priority LOW 32
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine.
TI-2019-12705 CVE-2019-17022 · GHSA-wgfq-5c99-wv2w
Cross-site scripting in Mozilla Firefox ESR
Priority LOW 31
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters.
TI-2019-12703 CVE-2019-17020 · GHSA-p8vh-p3hc-xm35
XML external entity injection in Mozilla Firefox
Priority LOW 31
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not be applied to the contents of the XSL stylesheet.
TI-2019-12700 CVE-2019-17017 · GHSA-6m7f-wqg6-qgm2
Type confusion in Mozilla Firefox ESR
Priority MEDIUM 43
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.
TI-2019-12699 CVE-2019-17016 · GHSA-w7r7-7cjm-rq4q
Cross-site scripting in Mozilla Firefox ESR
Priority LOW 31
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule.