Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2015-7217
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image.
CVE-2015-7216
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux G ...
CVE-2015-7216
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image.
CVE-2015-7215
The importScripts function in the Web Workers API implementation in Mo ...
CVE-2015-7215
The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.
CVE-2015-7214
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow rem ...
CVE-2015-7214
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
CVE-2015-7213
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4 ...
CVE-2015-7213
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
CVE-2015-7212
Integer overflow in the mozilla::layers::BufferTextureClient::Allocate ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2015-7217 The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image. | CVSS2: 4.3 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7216 The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux G ... | CVSS2: 6.8 | 2% Низкий | больше 10 лет назад |
| CVE-2015-7216 The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image. | CVSS2: 6.8 | 2% Низкий | больше 10 лет назад |
| CVE-2015-7215 The importScripts function in the Web Workers API implementation in Mo ... | CVSS2: 5 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7215 The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow. | CVSS2: 5 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7214 Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow rem ... | CVSS2: 5 | 6% Низкий | больше 10 лет назад |
| CVE-2015-7214 Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs. | CVSS2: 5 | 6% Низкий | больше 10 лет назад |
| CVE-2015-7213 Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4 ... | CVSS2: 6.8 | 4% Низкий | больше 10 лет назад |
| CVE-2015-7213 Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow. | CVSS2: 6.8 | 4% Низкий | больше 10 лет назад |
| CVE-2015-7212 Integer overflow in the mozilla::layers::BufferTextureClient::Allocate ... | CVSS2: 7.5 | 4% Низкий | больше 10 лет назад |
Уязвимостей на страницу