Daniel Holbert

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 **Description** The software contains a flaw. **Recommendations** Update Firefox to version 143 or later. Update Firefox ESR to version 140.3 or later. Update Thunderbird to version 143 or later. Update Thunderbird to version 140.3 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 133 Thunderbird versions prior to 133 **Description** The vulnerability is related to the incorrect display of a domain in the address bar during an interrupted navigation attempt, potentially leading to user confusion and spoofing attacks. This issue may allow a remote attacker to conduct spoofing attacks due to inadequate authentication procedure and incorrect domain name display in the address bar. **Recommendations** For Firefox versions prior to 133, update to a version that includes the fix for this issue. For Thunderbird versions prior to 133, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive information until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 126 Mozilla Firefox ESR versions prior to 115.11 Mozilla Thunderbird versions prior to 115.11 **Description** The issue is related to memory safety bugs, which can lead to memory corruption. Exploitation of this issue may allow a remote attacker to execute arbitrary code. **Recommendations** For Mozilla Firefox versions prior to 126, update to version 126 or later. For Mozilla Firefox ESR versions prior to 115.11, update to version 115.11 or later. For Mozilla Thunderbird versions prior to 115.11, update to version 115.11 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 122 Firefox ESR versions prior to 115.7 Thunderbird versions prior to 115.7 **Description** The issue is related to memory safety bugs, which can lead to memory corruption. It is presumed that with sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 122, update to version 122 or later. For Firefox ESR versions prior to 115.7, update to version 115.7 or later. For Thunderbird versions prior to 115.7, update to version 115.7 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 15.0 Firefox ESR versions prior to 10.0.7 Thunderbird versions prior to 15.0 Thunderbird ESR versions prior to 10.0.7 SeaMonkey versions prior to 2.12 **Description** The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors. **Recommendations** For Mozilla Firefox versions prior to 15.0, update to version 15.0 or later. For Firefox ESR versions prior to 10.0.7, update to version 10.0.7 or later. For Thunderbird versions prior to 15.0, update to version 15.0 or later. For Thunderbird ESR versions prior to 10.0.7, update to version 10.0.7 or later. For SeaMonkey versions prior to 2.12, update to version 2.12 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox version 3.6.7 **Description** The issue is related to the improper freeing of memory in the parameter array of a plugin instance, which can be exploited by remote attackers through a crafted HTML document. This is specifically tied to the DATA and SRC attributes of an OBJECT element, potentially leading to memory corruption or the execution of arbitrary code. **Recommendations** For Mozilla Firefox version 3.6.7, update to a version that properly addresses the memory freeing issue in the parameter array of plugin instances to prevent potential memory corruption or arbitrary code execution.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.14 Mozilla Firefox versions 3.5.x prior to 3.5.2 Description: The issue affects the browser engine, allowing remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code. The exact vectors used for the attack are not specified. Recommendations: For versions prior to 3.0.14, update to version 3.0.14 or later. For versions 3.5.x prior to 3.5.2, update to version 3.5.2 or later.