Frederik Braun

Ocorre escalonamento de privilégios no componente Downloads API.

Existe uma falha de bypass de mitigação no componente de segurança do DOM.

**Nome do software vulnerável e versões afetadas: Versões do Firefox ESR anteriores à 78.10 Versões do Thunderbird anteriores à 78.10 Versões do Firefox anteriores à 88 Descrição: A vulnerabilidade existe devido à validação insuficiente de entradas, permitindo que um invasor remoto contorne restrições de segurança. Isso pode ser explorado ao usar o cabeçalho Alt-Svc com portas escritas como um estouro de inteiro acima dos limites de um inteiro de 16 bits, potencialmente contornando restrições de bloqueio de portas. Recomendações: Para versões do Firefox ESR anteriores à 78.10, atualize para a versão 78.10 ou posterior. Para versões do Thunderbird anteriores à 78.10, atualize para a versão 78.10 ou posterior. Para versões do Firefox anteriores à 88, atualize para a versão 88 ou posterior.

A vulnerabilidade permite o enquadramento de outros sites usando tags object ou embed, mesmo que esses sites proíbam o enquadramento com o cabeçalho X-Frame-Options.

Foram relatados bugs de segurança de memória no Firefox, que apresentavam indícios de corrupção de memória. Presume-se que, com esforço suficiente, alguns desses bugs poderiam ter sido explorados para executar código arbitrário.

Foi detectada uma vulnerabilidade de Cross-Site Scripting refletido na geração de arquivos SVG do software afetado.

The issue exists when parsing JSON requests, allowing an attacker to execute arbitrary Python code due to an eval() vulnerability.

The issue is related to unnecessary application permissions that provide additional remote troubleshooting access to the retired site input.mozilla.org, now redirecting to another site. This could serve as a potential vector for malicious attacks. The vulnerability is associated with errors in Firefox's permission settings, which could allow a remote attacker to access and compromise confidential data.

The issue is caused by insufficient vetting of parameters passed with the `Prompt:Open` IPC message between child and parent processes. This can result in the non-sandboxed parent process opening web content chosen by a compromised child process, potentially allowing attackers to execute arbitrary code on the user's computer when combined with additional vulnerabilities.

The issue is related to the implementation of the WebRTC mechanism in Mozilla Firefox, which fails to protect the structure of web pages. This could potentially allow a remote attacker to conduct cross-site scripting (XSS) attacks. The vulnerability is difficult to exploit because the data is supplied by WebRTC usage and is not under third-party control.

The Developer Tools feature has a XUL injection issue due to improper sanitization of web page source code. This could allow arbitrary code execution when opening a malicious page with the style editor tool.

The lockscreen feature does not properly restrict failed authentication attempts, making it easier for physically proximate attackers to obtain access by entering many passcode guesses.

A cross-site scripting (XSS) issue exists in the Futon UI of Apache CouchDB, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite.

The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the `Branch` field or the `caption` of an uploaded file.

The issue allows JavaScript workers to read the browser-profile directory name, which has unspecified impact and can be exploited through remote attack vectors.