Holger Fuhrmannek

The issue is related to processing maliciously crafted files, which may lead to heap corruption.

A buffer overflow issue was addressed with improved bounds checking. This issue may lead to an unexpected app termination or arbitrary code execution when parsing an office document. The exploitation of this issue may allow an attacker to cause a denial of service or execute arbitrary code.

A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. This issue requires local system access and only affects Windows, with other operating systems not being affected.

The issue is related to a use-after-free in `ScriptLoadContext` due to uncancelled module load requests. This can potentially allow a remote attacker to execute arbitrary code.

The issue allows an app to bypass Privacy preferences. It was addressed with improved checks.

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 5.3.19 ILIAS versions prior to 5.4.12 ILIAS versions prior to 6.0 Description: An information disclosure issue allows remote authenticated attackers to obtain the upload data path via a workspace upload. Recommendations: For versions prior to 5.3.19, update to version 5.3.19 or later. For versions prior to 5.4.12, update to version 5.4.12 or later. For versions prior to 6.0, update to version 6.0 or later.

A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

The issue is related to the lack of integrity checks in the Mozilla Maintenance Service for Windows, which can be exploited to escalate privileges. This can occur when the Firefox installer allows the browser to be installed in a custom, user-writable location, making it vulnerable to manipulation by unprivileged users or malware. If the Maintenance Service is altered to update this unprotected location and the updated service has been modified, it can run with elevated privileges during the update process. This attack requires local system access and only affects Windows.

The issue is related to an out-of-bounds write that can be triggered when the Mozilla Updater opens a MAR format file containing a very long item filename, potentially leading to a crash. This can be exploited by running the Mozilla Updater manually on the local system with a malicious MAR file. The vulnerability may allow an attacker to execute arbitrary code using a specially crafted .MAR file.

Name of the Vulnerable Software and Affected Versions: Bugzilla versions prior to 4.4 Description: A security issue allows a third-party website to access restricted information available to a user through the image generation feature in the report.cgi module. Recommendations: For versions prior to 4.4, update to version 4.4 or later to resolve the issue.

The issue arises from the Mozilla Maintenance Service's "helper.exe" application creating a temporary directory that can be written to by non-privileged users. This can be exploited by creating a junction, a form of symbolic link, allowing protected files in the target directory to be deleted by the Mozilla Maintenance Service, which has privileged access. This attack requires local system access and is specific to Windows, with other operating systems not being affected.

The issue allows a malicious user to manipulate files in the installation directory and escalate privileges by altering the location of the original file through a special path passed to the `callback` parameter via the Mozilla Maintenance Service. This requires local system access and only affects Windows, with other operating systems not being affected.

The issue is related to an out-of-bounds read in the Graphite2 Library. It occurs in the `graphite2::Silf::readGraphite` function.

The issue is related to an out-of-bounds read in the Graphite2 Library. It occurs in the `graphite2::Pass::readPass` function, which suggests a problem with how data is accessed and processed.

The issue is related to the use of uninitialized memory in the Graphite2 library. Specifically, it affects the graphite2::GlyphCache::Loader::read glyph function.

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions prior to 54 Mozilla Firefox versions prior to 54 Mozilla Firefox ESR versions prior to 54 Description: The issue is caused by a heap-based buffer overflow in the lz4::decompress function of the Graphite 2 library. This can be exploited by a remote attacker to cause a denial of service or execute arbitrary code. Recommendations: For Graphite 2 versions prior to 54, update to version 54 or later to resolve the issue. For Mozilla Firefox versions prior to 54, update to version 54 or later to resolve the issue. For Mozilla Firefox ESR versions prior to 54, update to version 54 or later to resolve the issue.