firefox Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/firefox/ Sun, 26 Feb 2023 09:11:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png firefox Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/firefox/ 32 32 CVE-2008-5504 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5504/ Sun, 26 Feb 2023 09:11:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5504/ Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

The post CVE-2008-5504 appeared first on CVE Vulnerability.

]]> Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

The post CVE-2008-5504 appeared first on CVE Vulnerability.

]]> CVE-2008-5019 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5019/ Sun, 26 Feb 2023 09:10:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5019/ The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.

The post CVE-2008-5019 appeared first on CVE Vulnerability.

]]> The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.

The post CVE-2008-5019 appeared first on CVE Vulnerability.

]]> CVE-2008-3836 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3836/ Sun, 26 Feb 2023 09:10:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3836/ feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions.

The post CVE-2008-3836 appeared first on CVE Vulnerability.

]]> feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions.

The post CVE-2008-3836 appeared first on CVE Vulnerability.

]]> CVE-2020-6829 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6829/ Sun, 26 Feb 2023 06:42:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6829/ When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

The post CVE-2020-6829 appeared first on CVE Vulnerability.

]]> When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

The post CVE-2020-6829 appeared first on CVE Vulnerability.

]]> CVE-2020-12401 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12401/ Sun, 26 Feb 2023 06:36:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12401/ During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

The post CVE-2020-12401 appeared first on CVE Vulnerability.

]]> During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

The post CVE-2020-12401 appeared first on CVE Vulnerability.

]]> CVE-2020-12400 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12400/ Sun, 26 Feb 2023 06:36:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12400/ When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

The post CVE-2020-12400 appeared first on CVE Vulnerability.

]]> When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

The post CVE-2020-12400 appeared first on CVE Vulnerability.

]]> CVE-2019-9818 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9818/ Sun, 26 Feb 2023 06:35:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9818/ A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < […]

The post CVE-2019-9818 appeared first on CVE Vulnerability.

]]> A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

The post CVE-2019-9818 appeared first on CVE Vulnerability.

]]> CVE-2019-9815 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9815/ Sun, 26 Feb 2023 06:35:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9815/ If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need […]

The post CVE-2019-9815 appeared first on CVE Vulnerability.

]]> If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

The post CVE-2019-9815 appeared first on CVE Vulnerability.

]]> CVE-2019-9804 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9804/ Sun, 26 Feb 2023 06:35:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9804/ In Firefox Developer Tools it is possible that pasting the result of the ‘Copy as cURL’ command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash on macOS. *Note: […]

The post CVE-2019-9804 appeared first on CVE Vulnerability.

]]> In Firefox Developer Tools it is possible that pasting the result of the ‘Copy as cURL’ command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash on macOS. *Note: This issue only affects macOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.

The post CVE-2019-9804 appeared first on CVE Vulnerability.

]]> CVE-2019-9801 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9801/ Sun, 26 Feb 2023 06:35:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9801/ Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a “URL Handler” in the Windows registry. *Note: This issue only affects Windows operating systems. […]

The post CVE-2019-9801 appeared first on CVE Vulnerability.

]]> Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a “URL Handler” in the Windows registry. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

The post CVE-2019-9801 appeared first on CVE Vulnerability.

]]>