FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mozilla -- multiple vulnerabilities

Affected packages
	firefox	<	44.0,1
	linux-firefox	<	44.0,1
	linux-seamonkey	<	2.41
	seamonkey	<	2.41
	firefox-esr	<	38.6.0,1
	libxul	<	38.6.0
	linux-thunderbird	<	38.6.0
	thunderbird	<	38.6.0

Details

VuXML ID	4f00dac0-1e18-4481-95af-7aaad63fd303
Discovery	2016-01-26
Entry	2016-02-01
Modified	2016-03-08

Mozilla Foundation reports:

MFSA 2016-01 Miscellaneous memory safety hazards (rv:44.0 / rv:38.6)

MFSA 2016-02 Out of Memory crash when parsing GIF format images

MFSA 2016-03 Buffer overflow in WebGL after out of memory allocation

MFSA 2016-04 Firefox allows for control characters to be set in cookie names

MFSA 2016-06 Missing delay following user click events in protocol handler dialog

MFSA 2016-09 Addressbar spoofing attacks

MFSA 2016-10 Unsafe memory manipulation found through code inspection

MFSA 2016-11 Application Reputation service disabled in Firefox 43

[source]

References

CVE Name	CVE-2015-7208
CVE Name	CVE-2016-1930
CVE Name	CVE-2016-1931
CVE Name	CVE-2016-1933
CVE Name	CVE-2016-1935
CVE Name	CVE-2016-1937
CVE Name	CVE-2016-1939
CVE Name	CVE-2016-1942
CVE Name	CVE-2016-1943
CVE Name	CVE-2016-1944
CVE Name	CVE-2016-1945
CVE Name	CVE-2016-1946
CVE Name	CVE-2016-1947
URL	https://www.mozilla.org/security/advisories/mfsa2016-01/
URL	https://www.mozilla.org/security/advisories/mfsa2016-02/
URL	https://www.mozilla.org/security/advisories/mfsa2016-03/
URL	https://www.mozilla.org/security/advisories/mfsa2016-04/
URL	https://www.mozilla.org/security/advisories/mfsa2016-06/
URL	https://www.mozilla.org/security/advisories/mfsa2016-09/
URL	https://www.mozilla.org/security/advisories/mfsa2016-10/
URL	https://www.mozilla.org/security/advisories/mfsa2016-11/