rpm package
opensuse/firefox-esr&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed
Vulnerabilities (2,106)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-18504 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Feb 5, 2019 | A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affect | ||
| CVE-2018-18503 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Feb 5, 2019 | When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65. | ||
| CVE-2018-18502 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Feb 5, 2019 | Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firef | ||
| CVE-2018-18501 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Feb 5, 2019 | Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulner | ||
| CVE-2018-18500 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Feb 5, 2019 | A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox | ||
| CVE-2019-7317 | Med | 5.3 | < 128.5.1-1.1 | 128.5.1-1.1 | Feb 4, 2019 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | |
| CVE-2018-6126 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Jan 9, 2019 | A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. | ||
| CVE-2018-18356 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Dec 11, 2018 | An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2018-17466 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Nov 14, 2018 | Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. | ||
| CVE-2018-5188 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, | ||
| CVE-2018-5187 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1 | ||
| CVE-2018-5186 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 61. | ||
| CVE-2018-5156 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR | ||
| CVE-2018-12387 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sa | ||
| CVE-2018-12386 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3 | ||
| CVE-2018-12385 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache | ||
| CVE-2018-12383 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new ma | ||
| CVE-2018-12382 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loaded domain name, scrolling the loaded domain out of view to the right. This can lead to user confusion. *This vulnerability only affe | ||
| CVE-2018-12381 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems a | ||
| CVE-2018-12379 | — | < 128.5.1-1.1 | 128.5.1-1.1 | Oct 18, 2018 | When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in or |
- CVE-2018-18504Feb 5, 2019affected < 128.5.1-1.1fixed 128.5.1-1.1
A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affect
- CVE-2018-18503Feb 5, 2019affected < 128.5.1-1.1fixed 128.5.1-1.1
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.
- CVE-2018-18502Feb 5, 2019affected < 128.5.1-1.1fixed 128.5.1-1.1
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firef
- CVE-2018-18501Feb 5, 2019affected < 128.5.1-1.1fixed 128.5.1-1.1
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulner
- CVE-2018-18500Feb 5, 2019affected < 128.5.1-1.1fixed 128.5.1-1.1
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox
- affected < 128.5.1-1.1fixed 128.5.1-1.1
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
- CVE-2018-6126Jan 9, 2019affected < 128.5.1-1.1fixed 128.5.1-1.1
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
- CVE-2018-18356Dec 11, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2018-17466Nov 14, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- CVE-2018-5188Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60,
- CVE-2018-5187Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1
- CVE-2018-5186Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 61.
- CVE-2018-5156Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR
- CVE-2018-12387Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sa
- CVE-2018-12386Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3
- CVE-2018-12385Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache
- CVE-2018-12383Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new ma
- CVE-2018-12382Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loaded domain name, scrolling the loaded domain out of view to the right. This can lead to user confusion. *This vulnerability only affe
- CVE-2018-12381Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems a
- CVE-2018-12379Oct 18, 2018affected < 128.5.1-1.1fixed 128.5.1-1.1
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in or
Page 56 of 106