Boris Zbarsky

O problema está relacionado a falhas de segurança de memória e de scripts no Firefox, que poderiam potencialmente levar à corrupção de memória ou à escalada de privilégios. Presume-se que, com esforço suficiente, algumas dessas falhas poderiam ser exploradas para executar código arbitrário. A vulnerabilidade também é descrita como um estouro de buffer na memória, o que poderia permitir que um invasor remoto executasse código arbitrário.

The issue arises from insufficient input validation in the document.domain component of Firefox ESR, Firefox, and the Thunderbird email client. This can be exploited by a remote attacker to perform a cross-site scripting attack. When an inner window is reused, it fails to consider the use of `document.domain` for cross-origin protections, allowing pages on different subdomains to inject scripts into arbitrary pages on other subdomains.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 64 Description: The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It is also described as a buffer overflow vulnerability in memory, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. Recommendations: For versions prior to 64, update to version 64 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and minimizing browser usage until the update is applied.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. This affects various versions of Firefox, Firefox ESR, and Thunderbird.

The issue is related to memory safety bugs, which can lead to memory corruption. It is presumed that with sufficient effort, these bugs could be exploited to run arbitrary code, allowing a remote attacker to execute malicious code.

The issue is related to a buffer data boundary operation overflow. It may allow a remote attacker to execute arbitrary code. Memory safety bugs were reported, showing evidence of memory corruption, which could potentially be exploited.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.

The issue involves the `WebKit` component and allows remote attackers to obtain sensitive information via a crafted web site. It is related to the lack of protection for service data, which can be exploited by a remote attacker to gain confidential information using a specially formed web site.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.

The issue is caused by a buffer overflow, potentially allowing a remote attacker to cause a denial of service or execute arbitrary code, resulting in memory corruption and application crash.

The issue is caused by buffer overflow vulnerabilities in the browser engine, which can be exploited by a remote attacker to cause a denial of service, such as memory corruption and application crash, or possibly execute arbitrary code.

The issue is related to the lack of protection for certain data in Firefox browsers, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via the `reviver` parameter to the `JSON.parse` method. The estimated number of potentially affected devices worldwide is not specified.

The issue allows a remote attacker to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation. This can be achieved by exploiting the vulnerability in the affected software, allowing the attacker to perform actions with elevated privileges.

The issue arises from the improper identification of the `this` object during the use of user-defined getter methods on DOM proxies. This could potentially allow remote attackers to bypass intended access restrictions through vectors involving an expando object.

The issue is related to the PreserveWrapper implementation, which does not properly handle the lack of a wrapper. This allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.

The issue allows remote attackers to bypass intended access restrictions. This is due to the failure to prevent multiple wrapping of WebIDL objects.

The issue arises from improper implementation of quickstubs that use the `jsval` data type for their return values. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a compartment mismatch and application crash, via crafted JavaScript code that is not properly handled during garbage collection.

The issue arises from improper handling of "location" as the name of a frame, allowing remote attackers to bypass the Same Origin Policy via a crafted web site.

Name of the Vulnerable Software and Affected Versions: Mozilla Thunderbird versions prior to 2.0.0.18 SeaMonkey versions prior to 1.1.13 Description: The issue allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the `.documentURI` or `.textContent` DOM properties when JavaScript is enabled in mail. Recommendations: For Mozilla Thunderbird versions prior to 2.0.0.18, update to version 2.0.0.18 or later. For SeaMonkey versions prior to 1.1.13, update to version 1.1.13 or later.