TI-2017-05441 CVE-2017-7824 · GHSA-gvp7-j4mc-vqc9
Memory corruption in Mozilla Firefox
Priority MEDIUM 48
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content.
Vulnerabilities
8 records
TI-2017-05440 CVE-2017-7823 · GHSA-hhcx-w758-8p3p
Cross-site scripting in Mozilla Firefox
Priority LOW 27
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified.
TI-2017-05436 CVE-2017-7819 · GHSA-crj5-jxxg-27p8
Use after free in Mozilla Firefox
Priority MEDIUM 48
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory.
TI-2017-05435 CVE-2017-7818 · GHSA-9m9q-2r2h-7j8v
Use after free in Mozilla Firefox
Priority MEDIUM 48
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM.
TI-2017-05431 CVE-2017-7814 · GHSA-95j8-9fpj-7wc6
Improper input validation in Mozilla Firefox
Priority LOW 36
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files.
TI-2017-05427 CVE-2017-7810 · GHSA-65vv-2r24-pjcx
Memory corruption in Mozilla Firefox
Priority MEDIUM 47
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.
TI-2017-05422 CVE-2017-7805 · GHSA-595h-pjc7-9xf6
Use after free in Mozilla Firefox
Priority LOW 38
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.
TI-2017-05411 CVE-2017-7793 · GHSA-56mj-fm7c-959m
Use after free in Mozilla Firefox
Priority MEDIUM 46
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash.