CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7820 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7820
03 Oct 2017 — The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56. El operador "instanceof" puede omitir el mecanismo del wrapper Xray. Cuando se le llama en un contenido web desde el propio navegador o una extensión, el contenido web puede proporcionar su propio resulta... • http://www.securityfocus.com/bid/101057 •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7815 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7815
03 Oct 2017 — On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiprocess turned off. Installations with e10s turned on do not support the modal dialog functionality. This vulnerability affects Firefox < 56. En las páginas que contienen un iframe, se podría utilizar el protocolo "data:... • http://www.securityfocus.com/bid/101057 • CWE-20: Improper Input Validation •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-7822 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7822
03 Oct 2017 — The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox < 56. La implementación AES-GCM en WebCrypto API acepta 0-length IV cuando debería exigir una longitud de 1 de acuerdo con la especificación NIST Special Publication 800-38D. Esto podría permitir que se determine la clave de autent... • http://www.securityfocus.com/bid/101057 •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7813 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7813
03 Oct 2017 — Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This vulnerability affects Firefox < 56. Dentro del analizador JavaScript, el retorno de un entero a un tipo más estrecho puede resultar en que los datos leídos desde fuera del búfer sean analizados. Esto generalmente resulta en u... • http://www.securityfocus.com/bid/101057 • CWE-125: Out-of-bounds Read CWE-704: Incorrect Type Conversion or Cast •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7811 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7811
03 Oct 2017 — Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56. Se han informado de errores de seguridad de memoria en Firefox 55. Algunos de estos errores mostraron evidencias de corrupción de memoria y se cree que, con el esfuerzo necesario, se podrían explotar para ejecutar código arbitrario. • http://www.securityfocus.com/bid/101057 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7816 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7816
03 Oct 2017 — WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow this behavior. This vulnerability affects Firefox < 56. WebExtensions podría utilizar las ventanas emergentes y los paneles en la interfaz de usuario de la extensión para cargar una URL privilegiada "about:", violando las comprobaciones de seguridad que no permiten este comportamiento. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox. Multiple secu... • http://www.securityfocus.com/bid/101057 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7821 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7821
03 Oct 2017 — A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56. Una vulnerabilidad en el que WebExtensions puede descargar e intentar abrir un archivo de tipos que no sean ejecutables. • http://www.securityfocus.com/bid/101057 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2017-7812 – Ubuntu Security Notice USN-3435-1
https://notcve.org/view.php?id=CVE-2017-7812
03 Oct 2017 — If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56. Si el contenido web en una página se arrastra a porciones de la interfaz de usuario del navegador como una barra de pestañas, los enlaces se pueden abrir, algo que de otra manera no se podrían abrir. Esto puede permitir que un ... • http://www.securityfocus.com/bid/101057 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 15EXPL: 1CVE-2017-7823 – Mozilla: CSP sandbox directive did not create a unique origin (MFSA 2017-22)
https://notcve.org/view.php?id=CVE-2017-7823
29 Sep 2017 — The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified. This could allow a Cross-Site Scripting (XSS) attack to be launched from unsafe content. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4. La directiva CSP (Content Security Policy) "sandbox" no creaba un origen único para el documento, provocando que se comporte como si estuviera siempre es... • http://www.securityfocus.com/bid/101059 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 23EXPL: 0CVE-2017-7793 – Mozilla: Use-after-free with Fetch API (MFSA 2017-22)
https://notcve.org/view.php?id=CVE-2017-7793
29 Sep 2017 — A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4. Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada en la API Fetch cuando el trabajador o la ventana asociada se liberan mientras siguen en uso, lo que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afe... • http://www.securityfocus.com/bid/101055 • CWE-416: Use After Free •