Bzbarsky

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 46.0 Firefox ESR versions 45.x prior to 45.1 **Description** The issue is caused by buffer overflow vulnerabilities in the browser engine, which can be exploited by a remote attacker to cause a denial of service, such as memory corruption and application crash, or possibly execute arbitrary code. **Recommendations** For Firefox versions prior to 46.0, update to version 46.0 or later. For Firefox ESR versions 45.x prior to 45.1, update to version 45.1 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 46.0 Mozilla Firefox ESR (affected versions not specified) **Description** The issue is caused by a buffer overflow, potentially allowing a remote attacker to cause a denial of service or execute arbitrary code, resulting in memory corruption and application crash. **Recommendations** For Mozilla Firefox versions prior to 46.0, update to version 46.0 or later to resolve the issue. For Mozilla Firefox ESR, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 40.0 Firefox ESR versions prior to 38.2 **Description** The issue is related to the lack of protection for certain data in Firefox browsers, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via the `reviver` parameter to the `JSON.parse` method. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For Mozilla Firefox versions prior to 40.0, update to version 40.0 or later. For Firefox ESR versions prior to 38.2, update to version 38.2 or later. As a temporary workaround, consider restricting the use of the `JSON.parse` method with the `reviver` parameter until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 24.0 Firefox ESR versions prior to 17.0.9 Thunderbird versions prior to 24.0 Thunderbird ESR versions prior to 17.0.9 SeaMonkey versions prior to 2.21 **Description** The issue arises from the improper identification of the `this` object during the use of user-defined getter methods on DOM proxies. This could potentially allow remote attackers to bypass intended access restrictions through vectors involving an expando object. **Recommendations** For Mozilla Firefox versions prior to 24.0, update to version 24.0 or later. For Firefox ESR versions prior to 17.0.9, update to version 17.0.9 or later. For Thunderbird versions prior to 24.0, update to version 24.0 or later. For Thunderbird ESR versions prior to 17.0.9, update to version 17.0.9 or later. For SeaMonkey versions prior to 2.21, update to version 2.21 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 22.0 Firefox ESR versions prior to 17.0.7 Thunderbird versions prior to 17.0.7 Thunderbird ESR versions prior to 17.0.7 **Description** The issue is related to the PreserveWrapper implementation, which does not properly handle the lack of a wrapper. This allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag. **Recommendations** For Mozilla Firefox versions prior to 22.0, update to version 22.0 or later. For Firefox ESR versions prior to 17.0.7, update to version 17.0.7 or later. For Thunderbird versions prior to 17.0.7, update to version 17.0.7 or later. For Thunderbird ESR versions prior to 17.0.7, update to version 17.0.7 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 21.0 Firefox ESR 17.x versions prior to 17.0.6 Thunderbird versions prior to 17.0.6 Thunderbird ESR 17.x versions prior to 17.0.6 **Description** A use-after-free issue in the `nsContentUtils::RemoveScriptBlocker` function allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption via unspecified vectors. **Recommendations** For Mozilla Firefox versions prior to 21.0, update to version 21.0 or later. For Firefox ESR 17.x versions prior to 17.0.6, update to version 17.0.6 or later. For Thunderbird versions prior to 17.0.6, update to version 17.0.6 or later. For Thunderbird ESR 17.x versions prior to 17.0.6, update to version 17.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 19.0 Thunderbird versions prior to 17.0.3 SeaMonkey versions prior to 2.16 **Description** The issue allows remote attackers to bypass intended access restrictions. This is due to the failure to prevent multiple wrapping of WebIDL objects. **Recommendations** For Mozilla Firefox versions prior to 19.0, update to version 19.0 or later. For Thunderbird versions prior to 17.0.3, update to version 17.0.3 or later. For SeaMonkey versions prior to 2.16, update to version 2.16 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 18.0 Firefox ESR versions 10.x prior to 10.0.12 and 17.x prior to 17.0.2 Thunderbird versions prior to 17.0.2 Thunderbird ESR versions 10.x prior to 10.0.12 and 17.x prior to 17.0.2 SeaMonkey versions prior to 2.15 **Description** The issue arises from improper implementation of quickstubs that use the `jsval` data type for their return values. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a compartment mismatch and application crash, via crafted JavaScript code that is not properly handled during garbage collection. **Recommendations** For Mozilla Firefox versions prior to 18.0, update to version 18.0 or later. For Firefox ESR versions 10.x prior to 10.0.12, update to version 10.0.12 or later. For Firefox ESR versions 17.x prior to 17.0.2, update to version 17.0.2 or later. For Thunderbird versions prior to 17.0.2, update to version 17.0.2 or later. For Thunderbird ESR versions 10.x prior to 10.0.12, update to version 10.0.12 or later. For Thunderbird ESR versions 17.x prior to 17.0.2, update to version 17.0.2 or later. For SeaMonkey versions prior to 2.15, update to version 2.15 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.6.23 Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6.0 SeaMonkey versions prior to 2.3 **Description** The issue arises from improper handling of "location" as the name of a frame, allowing remote attackers to bypass the Same Origin Policy via a crafted web site. **Recommendations** For Mozilla Firefox versions prior to 3.6.23, update to version 3.6.23 or later. For Mozilla Firefox versions 4.x through 5, update to a version later than 5. For Thunderbird versions prior to 6.0, update to version 6.0 or later. For SeaMonkey versions prior to 2.3, update to version 2.3 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.6.18 Thunderbird versions prior to 3.1.11 **Description** The issue is related to multiple unspecified vulnerabilities in the browser engine, allowing remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code via unknown vectors. **Recommendations** For Mozilla Firefox versions prior to 3.6.18, update to version 3.6.18 or later. For Thunderbird versions prior to 3.1.11, update to version 3.1.11 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.5.17 Mozilla Firefox versions 3.6.x prior to 3.6.14 SeaMonkey versions prior to 2.0.12 **Description** A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a different web site. **Recommendations** For Mozilla Firefox versions prior to 3.5.17, update to version 3.5.17 or later. For Mozilla Firefox versions 3.6.x prior to 3.6.14, update to version 3.6.14 or later. For SeaMonkey versions prior to 2.0.12, update to version 2.0.12 or later.

Name of the Vulnerable Software and Affected Versions: Mozilla Thunderbird versions prior to 2.0.0.18 SeaMonkey versions prior to 1.1.13 Description: The issue allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the `.documentURI` or `.textContent` DOM properties when JavaScript is enabled in mail. Recommendations: For Mozilla Thunderbird versions prior to 2.0.0.18, update to version 2.0.0.18 or later. For SeaMonkey versions prior to 1.1.13, update to version 1.1.13 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions 2.0.0 through 2.0.18 Thunderbird versions 2.0.0 through 2.0.18 SeaMonkey versions 1.0 through 1.1.13 **Description** The issue is related to the loadBindingDocument function, which does not enforce the same-domain policy, allowing remote attackers to access data from other domains using crafted XBL bindings. **Recommendations** For Mozilla Firefox versions 2.0.0 through 2.0.18, update to version 2.0.0.19 or later. For Thunderbird versions 2.0.0 through 2.0.18, update to version 2.0.0.19 or later. For SeaMonkey versions 1.0 through 1.1.13, update to version 1.1.14 or later.