Websecurity - Веб безпека

Виявлені численні уразливості безпеки в Mozilla Firefox, Thunderbird, Seamonkey.

Уразливі продукти: Mozilla Firefox ESR 31.4, Firefox 35, Thunderbird 31.4, SeaMonkey 2.33.

Обхід обмежень, підміна даних, розкриття інформації, переповнення буфера, пошкодження пам’яті, DoS, виконання коду.

• MFSA 2015-11 Miscellaneous memory safety hazards (rv:36.0 / rv:31.5) (деталі)
• MFSA 2015-12 Invoking Mozilla updater will load locally stored DLL files (деталі)
• MFSA 2015-13 Appended period to hostnames can bypass HPKP and HSTS protections (деталі)
• MFSA 2015-14 Malicious WebGL content crash when writing strings (деталі)
• MFSA 2015-15 TLS TURN and STUN connections silently fail to simple TCP connections (деталі)
• MFSA 2015-16 Use-after-free in IndexedDB (деталі)
• Buffer overflow in libstagefright during MP4 video playback (деталі)
• MFSA 2015-18 Double-free when using non-default memory allocators with a zero-length XHR (деталі)
• MFSA 2015-19 Out-of-bounds read and write while rendering SVG content (деталі)
• MFSA 2015-20 Buffer overflow during CSS restyling (деталі)
• MFSA 2015-21 Buffer underflow during MP3 playback (деталі)
• MFSA 2015-22 Crash using DrawTarget in Cairo graphics library (деталі)
• MFSA 2015-23 Use-after-free in Developer Console date with OpenType Sanitiser (деталі)
• MFSA 2015-24 Reading of local files through manipulation of form autocomplete (деталі)
• MFSA 2015-25 Local files or privileged URLs in pages can be opened into new tabs (деталі)
• MFSA 2015-26 UI Tour whitelisted sites in background tab can spoof foreground tabs (деталі)
• MFSA 2015-27 Caja Compiler JavaScript sandbox bypass (деталі)
• MFSA 2015-28 Privilege escalation through SVG navigation (деталі)
• MFSA 2015-29 Code execution through incorrect JavaScript bounds checking elimination (деталі)

This entry was posted on 22:47 17.04.2015 and is filed under Новини, Помилки. You can follow any responses to this entry through the RSS 2.0 feed.