From bc9db444b9e84f1ba6dafb57c188dfbeb63d1808 Mon Sep 17 00:00:00 2001 From: Xin LI Date: Wed, 23 Jul 2014 07:50:19 +0000 Subject: [PATCH] Document Mozilla multiple vulnerabilities. --- security/vuxml/vuln.xml | 92 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 92 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index daf9efc32fe2..bbca270bc80f 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,98 @@ Notes: --> + + mozilla -- multiple vulnerabilities + + + firefox + 31.0,1 + + + firefox-esr + 24.7.0,1 + + + linux-firefox + 31.0,1 + + + linux-thunderbird + 24.7.0 + + + thunderbird + 24.7.0 + + + nss + 3.16.1_2 + + + + + +

The Mozilla Project reports:

+
+

MFSA 2014-66 IFRAME sandbox same-origin access through + redirect

+

MFSA 2014-65 Certificate parsing broken by non-standard + character encoding

+

MFSA 2014-64 Crash in Skia library when scaling high + quality images

+

MFSA 2014-63 Use-after-free while when manipulating + certificates in the trusted cache

+

MFSA 2014-62 Exploitable WebGL crash with Cesium + JavaScript library

+

MFSA 2014-61 Use-after-free with FireOnStateChange + event

+

MFSA 2014-60 Toolbar dialog customization event + spoofing

+

MFSA 2014-59 Use-after-free in DirectWrite font + handling

+

MFSA 2014-58 Use-after-free in Web Audio due to + incorrect control message ordering

+

MFSA 2014-57 Buffer overflow during Web Audio + buffering for playback

+

MFSA 2014-56 Miscellaneous memory safety hazards + (rv:31.0 / rv:24.7)

+
+ + + + CVE-2014-1544 + CVE-2014-1547 + CVE-2014-1548 + CVE-2014-1549 + CVE-2014-1550 + CVE-2014-1551 + CVE-2014-1552 + CVE-2014-1555 + CVE-2014-1556 + CVE-2014-1557 + CVE-2014-1558 + CVE-2014-1559 + CVE-2014-1560 + CVE-2014-1561 + https://www.mozilla.org/security/announce/2014/mfsa2014-56.html + https://www.mozilla.org/security/announce/2014/mfsa2014-57.html + https://www.mozilla.org/security/announce/2014/mfsa2014-58.html + https://www.mozilla.org/security/announce/2014/mfsa2014-59.html + https://www.mozilla.org/security/announce/2014/mfsa2014-60.html + https://www.mozilla.org/security/announce/2014/mfsa2014-61.html + https://www.mozilla.org/security/announce/2014/mfsa2014-62.html + https://www.mozilla.org/security/announce/2014/mfsa2014-63.html + https://www.mozilla.org/security/announce/2014/mfsa2014-64.html + https://www.mozilla.org/security/announce/2014/mfsa2014-65.html + https://www.mozilla.org/security/announce/2014/mfsa2014-66.html + https://www.mozilla.org/security/announce/ + + + 2014-07-22 + 2014-07-23 + + + mcollective -- cert valication issue