Websecurity - Веб безпека

Виявлені численні уразливості безпеки в Mozilla Firefox, Thunderbird, Seamonkey.

Уразливі продукти: Mozilla Firefox ESR 31.5, Firefox 36, Thunderbird 31.5, SeaMonkey 2.34.

Обхід перевірки сертифіката, виконання коду, обхід обмежень, пошкодження пам’яті, перехоплення курсору.

• MFSA 2015-30 Miscellaneous memory safety hazards (деталі)
• MFSA 2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin (деталі)
• MFSA 2015-32 Add-on lightweight theme installation approval bypassed through MITM attack (деталі)
• MFSA 2015-33 resource:// documents can load privileged pages (деталі)
• MFSA 2015-34 Out of bounds read in QCMS library (деталі)
• MFSA 2015-35 Cursor clickjacking with flash and images (деталі)
• MFSA 2015-36 Incorrect memory management for simple-type arrays in WebRTC (деталі)
• MFSA 2015-37 CORS requests should not follow 30x redirections after preflight (деталі)
• MFSA 2015-38 Memory corruption crashes in Off Main Thread Compositing (деталі)
• MFSA 2015-39 Use-after-free due to type confusion flaws (деталі)
• MFSA 2015-40 Same-origin bypass through anchor navigation (деталі)
• MFSA 2015-41 PRNG weakness allows for DNS poisoning on Android (деталі)
• MFSA 2015-42 Windows can retain access to privileged content on navigation to unprivileged pages (деталі)
• MFSA 2015-43 Loading privileged content through Reader mode (деталі)
• MFSA 2015-44 Certificate verification bypass through the HTTP/2 Alt-Svc header (деталі)
• MFSA 2015-45 Memory corruption during failed plugin initialization (деталі)

This entry was posted on 20:03 19.05.2015 and is filed under Новини, Помилки. You can follow any responses to this entry through the RSS 2.0 feed.