Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2016-1938
The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Secur ...
CVE-2016-1938
The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
CVE-2016-1937
The protocol-handler dialog in Mozilla Firefox before 44.0 allows remo ...
CVE-2016-1937
The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.
CVE-2016-1935
Buffer overflow in the BufferSubData function in Mozilla Firefox befor ...
CVE-2016-1935
Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
CVE-2016-1933
Integer overflow in the image-deinterlacing functionality in Mozilla F ...
CVE-2016-1933
Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image.
CVE-2016-1931
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
CVE-2016-1931
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2016-1938 The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Secur ... | CVSS3: 6.5 | 3% Низкий | больше 10 лет назад |
 | CVE-2016-1938 The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function. | CVSS3: 6.5 | 3% Низкий | больше 10 лет назад |
| CVE-2016-1937 The protocol-handler dialog in Mozilla Firefox before 44.0 allows remo ... | CVSS3: 6.1 | 1% Низкий | больше 10 лет назад |
| CVE-2016-1937 The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended. | CVSS3: 6.1 | 1% Низкий | больше 10 лет назад |
| CVE-2016-1935 Buffer overflow in the BufferSubData function in Mozilla Firefox befor ... | CVSS3: 8.8 | 5% Низкий | больше 10 лет назад |
| CVE-2016-1935 Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content. | CVSS3: 8.8 | 5% Низкий | больше 10 лет назад |
| CVE-2016-1933 Integer overflow in the image-deinterlacing functionality in Mozilla F ... | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-1933 Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image. | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-1931 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS3: 10 | 6% Низкий | больше 10 лет назад |
| CVE-2016-1931 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors. | CVSS3: 10 | 6% Низкий | больше 10 лет назад |
Уязвимостей на страницу