TI-2019-12707 CVE-2019-17024 · GHSA-r596-hj6g-g56c
Out-of-bounds write in Mozilla Firefox ESR
Priority MEDIUM 43
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.
Vulnerabilities
6 records
TI-2019-12705 CVE-2019-17022 · GHSA-wgfq-5c99-wv2w
Cross-site scripting in Mozilla Firefox ESR
Priority LOW 31
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters.
TI-2019-12704 CVE-2019-17021 · GHSA-23vm-fc59-7qjv
Race condition in Mozilla Firefox ESR
Priority LOW 28
During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process.
TI-2019-12700 CVE-2019-17017 · GHSA-6m7f-wqg6-qgm2
Type confusion in Mozilla Firefox ESR
Priority MEDIUM 43
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.
TI-2019-12699 CVE-2019-17016 · GHSA-w7r7-7cjm-rq4q
Cross-site scripting in Mozilla Firefox ESR
Priority LOW 31
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule.
TI-2019-12698 CVE-2019-17015 · GHSA-6jgc-63f5-7hch
Out-of-bounds write in Mozilla Firefox ESR
Priority MEDIUM 42
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process.