Поиск уязвимостей
Количество 7
Количество 7
BDU:2020-00593
Уязвимость браузера Firefox, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить доступ к конфиденциальным данным
CVE-2019-9802
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.
CVE-2019-9802
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.
CVE-2019-9802
If a Sandbox content process is compromised, it can initiate an FTP do ...
GHSA-r3xx-53c7-m93v
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.
ALT-PU-2019-1561
ALT-PU-2019-1561: package `firefox` update to version 66.0.1-alt1
ALT-PU-2019-2324
ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2020-00593 Уязвимость браузера Firefox, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 7.5 | 1% Низкий | больше 7 лет назад | |
CVE-2019-9802 If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66. | CVSS3: 7.5 | 1% Низкий | больше 7 лет назад | |
CVE-2019-9802 If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66. | CVSS3: 7.5 | 1% Низкий | больше 7 лет назад | |
CVE-2019-9802 If a Sandbox content process is compromised, it can initiate an FTP do ... | CVSS3: 7.5 | 1% Низкий | больше 7 лет назад | |
GHSA-r3xx-53c7-m93v If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66. | 1% Низкий | больше 4 лет назад | ||
ALT-PU-2019-1561 ALT-PU-2019-1561: package `firefox` update to version 66.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад | ||
ALT-PU-2019-2324 ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад |
Уязвимостей на страницу