Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 368
CVE-2017-5447
An out-of-bounds read during the processing of glyph widths during tex ...
CVE-2017-5446
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
CVE-2017-5446
An out-of-bounds read when an HTTP/2 connection to a servers sends "DA ...
CVE-2017-5445
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
CVE-2017-5445
A vulnerability while parsing "application/http-index-format" format c ...
CVE-2017-5444
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
CVE-2017-5444
A buffer overflow vulnerability while parsing "application/http-index- ...
CVE-2017-5443
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
CVE-2017-5443
An out-of-bounds write vulnerability while decoding improperly formed ...
CVE-2017-5442
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2017-5447 An out-of-bounds read during the processing of glyph widths during tex ... | CVSS3: 9.1 | 17% Средний | около 8 лет назад |
 | CVE-2017-5446 An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. | CVSS3: 9.8 | 3% Низкий | около 8 лет назад |
| CVE-2017-5446 An out-of-bounds read when an HTTP/2 connection to a servers sends "DA ... | CVSS3: 9.8 | 3% Низкий | около 8 лет назад |
| CVE-2017-5445 A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. | CVSS3: 7.5 | 3% Низкий | около 8 лет назад |
| CVE-2017-5445 A vulnerability while parsing "application/http-index-format" format c ... | CVSS3: 7.5 | 3% Низкий | около 8 лет назад |
| CVE-2017-5444 A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
| CVE-2017-5444 A buffer overflow vulnerability while parsing "application/http-index- ... | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
| CVE-2017-5443 An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. | CVSS3: 9.8 | 3% Низкий | около 8 лет назад |
| CVE-2017-5443 An out-of-bounds write vulnerability while decoding improperly formed ... | CVSS3: 9.8 | 3% Низкий | около 8 лет назад |
| CVE-2017-5442 A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. | CVSS3: 9.8 | 3% Низкий | около 8 лет назад |
Уязвимостей на страницу