Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2015-7179
The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content.
CVE-2015-7178
The ProgramBinary::linkAttributes function in libGLES in ANGLE, as use ...
CVE-2015-7178
The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
CVE-2015-7177
The InitTextures function in Mozilla Firefox before 41.0 and Firefox E ...
CVE-2015-7177
The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVE-2015-7176
The AnimationThread function in Mozilla Firefox before 41.0 and Firefo ...
CVE-2015-7176
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors.
CVE-2015-7175
The XULContentSinkImpl::AddText function in Mozilla Firefox before 41. ...
CVE-2015-7175
The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
CVE-2015-7174
The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41. ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2015-7179 The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content. | CVSS2: 7.5 | 4% Низкий | почти 11 лет назад |
| CVE-2015-7178 The ProgramBinary::linkAttributes function in libGLES in ANGLE, as use ... | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7178 The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content. | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7177 The InitTextures function in Mozilla Firefox before 41.0 and Firefox E ... | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7177 The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors. | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7176 The AnimationThread function in Mozilla Firefox before 41.0 and Firefo ... | CVSS2: 7.5 | 4% Низкий | почти 11 лет назад |
| CVE-2015-7176 The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors. | CVSS2: 7.5 | 4% Низкий | почти 11 лет назад |
| CVE-2015-7175 The XULContentSinkImpl::AddText function in Mozilla Firefox before 41. ... | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7175 The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow." | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7174 The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41. ... | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
Уязвимостей на страницу