USN-2880-1 已修復 Firefox 中的弱點。此更新引入了一個迴歸，可造成 Firefox 在以某些組態啟動時損毀。此更新可修正該問題。

由此給您帶來的不便，我們深表歉意。

Bob Clary、Christian Holler、Nils Ohlmeier、Gary Kwong、Jesse Ruderman、Carsten Book、Randell Jesup、Nicolas Pierron、Eric Rescorla、Tyson Smith 和 Gabor Krizsanits 發現 Firefox 中有多個記憶體安全問題。如果使用者遭到誘騙而開啟特製網站，攻擊者可能加以惡意利用，透過損毀應用程式來引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2016-1930、CVE-2016-1931)

Gustavo Grieco 發現，在某些情況下載入 GIF 影像時，會發生一個記憶體不足損毀問題。如果使用者遭到誘騙而開啟特製的網站，攻擊者便可惡意利用此弱點造成拒絕服務。
(CVE-2016-1933)

Aki Helin 發現，在某些情況下轉譯 WebGL 內容時出現一個緩衝區溢位問題。如果使用者遭到誘騙而開啟特製網站，攻擊者可能加以惡意利用，透過損毀應用程式來引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2016-1935)

據發現，聚焦通訊協定處置程式對話方塊時，遺漏一個延遲。如果使用者遭到誘騙而開啟特製的網站，攻擊者可能加以惡意利用，藉此發動點擊劫持攻擊。
(CVE-2016-1937)

Hanno Bock 發現，NSS 中的 mp_div 和 mp_exptmod 計算在某些情況下會產生不正確的結果，進而導致密碼編譯弱點。
(CVE-2016-1938)

Nicholas Hurley 發現，Firefox 允許在 cookie 名稱中設定控制字元。攻擊者可能加以惡意利用，對某些 Web 伺服器發動 Cookie 插入攻擊。(CVE-2016-1939)

據發現，在位址列中貼上某些無效的 URL 時，位址列內容可能會遭到操控，進而顯示任意網站的位置。攻擊者可能加以惡意利用，發動 URL 偽造攻擊。(CVE-2016-1942)

Ronald Crane 發現程式碼檢查過程中有三個弱點。如果使用者遭到誘騙而開啟特製網站，攻擊者可能加以惡意利用，透過損毀應用程式來引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2016-1944、CVE-2016-1945、CVE-2016-1946)

Francois Marier 發現，Application Reputation 查閱未正確運作，其停用了潛在惡意下載的警告。攻擊者可能誘騙使用者下載惡意檔案，來惡意利用此問題。其他部分的安全瀏覽功能不受此問題影響。(CVE-2016-1947)

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

更新后的 firefox 程序包修复了多种安全问题，现在可用于Red Hat Enterprise Linux 5、6 和 7。

Red Hat 产品安全团队将此更新评级为具有严重安全影响。可从“参考”部分中的 CVE 链接获取针对每个漏洞的通用漏洞评分系统 (CVSS) 基本分数，其给出了详细的严重性等级。

Mozilla Firefox 是一款开源 Web 浏览器。XULRunner 提供用于 Mozilla Firefox 的 XUL Runtime 环境。

在对畸形 Web 内容的处理中发现多个缺陷。包含恶意内容的网页可导致 Firefox 崩溃，或者可能以运行 Firefox 的用户的权限执行任意代码。（CVE-2016-1930、CVE-2016-1935）

Red Hat 在此感谢 Mozilla 项目报告这些问题。上游感谢原始报告者 Bob Clary、Christian Holler、Nils Ohlmeier、Gary Kwong、Jesse Ruderman、Carsten Book、Randell Jesup 及 Aki Helin。

所有 Firefox 用户应升级这些更新后的程序包，其中包含已修正了这些问题的 Firefox 版本 38.6.0 ESR。安装更新后，必须重新启动 Firefox 才能使更改生效。

在对畸形 Web 内容的处理中发现多个缺陷。包含恶意内容的网页可导致 Firefox 崩溃，或者可能以运行 Firefox 的用户的权限执行任意代码。（CVE-2016-1930、CVE-2016-1935）

安装更新后，必须重新启动 Firefox 才能使更改生效。

Bob Clary、Christian Holler、Nils Ohlmeier、Gary Kwong、Jesse Ruderman、Carsten Book、Randell Jesup、Nicolas Pierron、Eric Rescorla、Tyson Smith 和 Gabor Krizsanits 发现 Firefox 中存在多个内存安全问题。如果用户受到诱骗打开特别构建的网站，攻击者可能利用这些漏洞，通过应用程序崩溃造成拒绝服务，或者以调用 Firefox 的用户的权限执行任意代码。（CVE-2016-1930、CVE-2016-1931）

Gustavo Grieco 发现，在某些情况下，加载 GIF 图像时会发生内存不足崩溃问题。如果用户受到诱骗打开特别构建的网站，攻击者可利用此漏洞造成拒绝服务。(CVE-2016-1933)

Aki Helin 发现在某些情况下渲染 WebGL 内容时，存在缓冲区溢出。如果用户受到诱骗打开特别构建的网站，攻击者可能利用此漏洞，通过应用程序崩溃造成拒绝服务，或者以调用 Firefox 的用户的权限执行任意代码。(CVE-2016-1935)

已发现聚焦协议处理程序对话框时，缺少一个延迟。如果用户受到诱骗打开特别构建的网站，攻击者可能利用此漏洞进行“点击劫持”攻击。(CVE-2016-1937)

Hanno Bock 发现，NSS 中的 mp_div 和 mp_exptmod 计算在某些情况下会产生不正确的结果，进而导致加密漏洞。(CVE-2016-1938)

Nicholas Hurley 发现，Firefox 允许在 cookie 名称中设置控制字符。攻击者可能利用此漏洞在某些 Web 服务器上执行 Cookie 注入攻击。
(CVE-2016-1939)

已发现在地址栏中贴上某些无效的 URL 时，地址栏内容可能会遭到操控，进而显示任意网站的位置。攻击者可能利用此漏洞执行 URL 欺骗攻击。(CVE-2016-1942)

Ronald Crane 发现代码检查过程中存在三个漏洞。
如果用户受到诱骗打开特别构建的网站，攻击者可能利用这些漏洞，通过应用程序崩溃造成拒绝服务，或者以调用 Firefox 的用户的权限执行任意代码。（CVE-2016-1944、CVE-2016-1945、CVE-2016-1946）

Francois Marier 发现，Application Reputation 查找未正确运行，其禁用了潜在恶意下载的警告。攻击者可能通过诱骗用户下载恶意文件，进而利用此问题。其他部分的安全浏览功能不受此问题影响。(CVE-2016-1947)

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行了自动清理和排版。

远程 Mac OS X 主机上安装的 Firefox 版本低于 44。因此，它受到以下漏洞的影响：

- 存在一个 Cookie 注入漏洞，这是因为将非法控制字符储存为 Cookie 值，违反 RFC6265 所导致。远程攻击者可利用此漏洞注入 Cookie。(CVE-2015-7208)

- 存在多种不明内存损坏问题，远程攻击者可利用这些问题执行任意代码。
 （CVE-2016-1930、CVE-2016-1931）

- 存在一个整数溢出情况，这是因为在去交隔行过程中不当解析 GIF 图像所导致。远程攻击者可利用此问题，通过特别构建的 GIF 图像，造成拒绝服务情况或执行任意代码。(CVE-2016-1933)

- WebGL 中存在一个缓冲区溢出情况，其会在处理缓存不足错误情况时触发。远程攻击者可利用此缺陷执行任意代码。(CVE-2016-1935)

- 存在一个内容伪造漏洞，这是因为协议处理程序对话框将双击事件作为两次单击事件处理所导致。远程攻击者可利用此欺骗内容，诱骗用户执行恶意操作。(CVE-2016-1937)

- Network Security Services (NSS) 中存在一个加密漏洞，这是因为“mp_div' and 'mp_exptmod”的错误计算所导致。(CVE-2016-1938)

- 存在一个 Cookie 注入漏洞，这是因为在 Cookie 名称中允许使用非法控制字符所导致。远程攻击者可利用此漏洞注入 Cookie。
 (CVE-2016-1939)

- 存在一个 URL 欺骗漏洞，这是因为处理一个对内部协议无效的 URL 过程中触发一个缺陷，造成将 URL 粘贴到地址栏中所导致。远程攻击者可利用此欺骗 URL，诱骗用户访问恶意网站。(CVE-2016-1942)

- ANGLE 图库实现中存在一个不明的内存损坏问题。远程攻击者可利用此问题损坏内存，导致执行任意代码。(CVE-2016-1944)

- 存在一个失控指针缺陷，这是因为不当处理 ZIP 文件所导致。远程攻击者可利用此缺陷，通过特别构建的 ZIP 文件造成不明影响。
 (CVE-2016-1945)

- 绑定的 libstagefright 版本中存在一个整数溢出情况，这是因为不当处理 MP4 文件元数据所导致。远程攻击者可利用此缺陷执行任意代码。(CVE-2016-1946)

- 安全浏览功能中存在一个缺陷，这是因为无法连接 Application Reputation 服务所导致。远程攻击者可以利用此缺陷，说服用户下载恶意可执行文件，而不会发出警告。(CVE-2016-1947)

- Network Security Services (NSS) 中存在一个释放后使用错误，这是因为 DHE 和 ECDHE 握手过程中不当处理失败的分配所导致。攻击者可利用此问题取消引用已经释放的内存，从而导致执行任意代码。
 (CVE-2016-1978)

此 MozillaFirefox 更新修复了多个安全问题和缺陷。

Mozilla Firefox 已更新到 44.0。Mozilla NSS 已更新到 3.21 Mozilla NSPR 已更新到 4.11。

修复了以下漏洞：

- CVE-2016-1930/CVE-2016-1931：其他内存安全危害 (boo#963633)

- CVE-2016-1933：解析 GIF 格式影像时发生内存不足崩溃 (boo#963634)

- CVE-2016-1935：内存不足分配后在 WebGL 中发生缓冲区溢出 (boo#963635)

- CVE-2015-7208/CVE-2016-1939：Firefox 允许在 Cookie 名称中设置控制字符 (boo#963637)

- CVE-2016-1937：在协议处理程序对话框中的用户点击事件后缺少延迟 (boo#963641)

- CVE-2016-1938：NSS 的 mp_div 和 mp_exptmod 加密函数中有错误 (boo#963731)

- CVE-2016-1942/CVE-2016-1943：地址栏欺骗攻击 (boo#963643)

- CVE-2016-1944/CVE-2016-1945/CVE-2016-1946：通过代码检查发现不安全的内存操控 (boo#963644)

- CVE-2016-1947：Firefox 43 中的 Application Reputation 服务禁用 (boo#963645)

包含下列来自 Mozilla Firefox 43.0.4 的变更：

- 重新启用 SHA-1 证书，防止过时的中间人安全设备干扰受到妥善保护的 SSL/TLS 连接

USN-2880-1 修复了 Firefox 中的漏洞。此更新引入了一个回归，可造成 Firefox 在以某些配置启动时崩溃。此更新修复了该问题。

我们对不便之处表示抱歉。

Bob Clary、Christian Holler、Nils Ohlmeier、Gary Kwong、Jesse Ruderman、Carsten Book、Randell Jesup、Nicolas Pierron、Eric Rescorla、Tyson Smith 和 Gabor Krizsanits 发现 Firefox 中存在多个内存安全问题。如果用户受到诱骗打开特别构建的网站，攻击者可能利用这些漏洞，通过应用程序崩溃造成拒绝服务，或者调用 Firefox 的用户的权限执行任意代码。（CVE-2016-1930、CVE-2016-1931）

Gustavo Grieco 发现，在某些情况下，加载 GIF 图像时会发生内存不足崩溃问题。如果用户受到诱骗打开特别构建的网站，攻击者可利用此漏洞造成拒绝服务。
(CVE-2016-1933)

Aki Helin 发现在某些情况下渲染 WebGL 内容时，存在缓冲区溢出。如果用户受到诱骗打开特别构建的网站，攻击者可能利用此漏洞，通过应用程序崩溃造成拒绝服务，或者以调用 Firefox 的用户的权限执行任意代码。(CVE-2016-1935)

已发现聚焦协议处理程序对话框时，缺少一个延迟。如果用户受到诱骗打开特别构建的网站，攻击者可能利用此漏洞进行“点击劫持”攻击。
(CVE-2016-1937)

Hanno Bock 发现，NSS 中的 mp_div 和 mp_exptmod 计算在某些情况下会产生不正确的结果，进而导致加密漏洞。
(CVE-2016-1938)

Nicholas Hurley 发现，Firefox 允许在 cookie 名称中设置控制字符。攻击者可能利用此漏洞在某些 Web 服务器上执行 Cookie 注入攻击。(CVE-2016-1939)

已发现在地址栏中贴上某些无效的 URL 时，地址栏内容可能会遭到操控，进而显示任意网站的位置。攻击者可能利用此漏洞执行 URL 欺骗攻击。(CVE-2016-1942)

Ronald Crane 发现代码检查过程中存在三个漏洞。如果用户受到诱骗打开特别构建的网站，攻击者可能利用这些漏洞，通过应用程序崩溃造成拒绝服务，或者以调用 Firefox 的用户的权限执行任意代码。（CVE-2016-1944、CVE-2016-1945、CVE-2016-1946）

Francois Marier 发现，Application Reputation 查找未正确运行，其禁用了潜在恶意下载的警告。攻击者可能通过诱骗用户下载恶意文件，进而利用此问题。其他部分的安全浏览功能不受此问题影响。(CVE-2016-1947)

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

在 Icedove（Debian 版本的 Mozilla Thunderbird 邮件客户端）中发现多个安全问题：多个内存安全错误、整数溢出、缓冲区溢出及其他实现错误，可能导致任意代码执行或拒绝服务。

The version of Firefox is prior to 44.0 and is affected by multiple vulnerabilities : 

 - Multiple unspecified memory corruption issues exist that allow a remote attacker to execute arbitrary code. (CVE-2016-1930, CVE-2016-1931)
 - An integer overflow condition exists due to improper parsing of GIF images during deinterlacing. A remote attacker can exploit this, via a specially crafted GIF image, to cause a denial of service condition or the execution of arbitrary code. (CVE-2016-1933)
 - A buffer overflow condition exists in WebGL that is triggered when handling cache out-of-memory error conditions. A remote attacker can exploit this to execute arbitrary code. (CVE-2016-1935)
 - A content spoofing vulnerability exists due to the protocol handler dialog treating double click events as two single click events. A remote attacker can exploit this to spoof content, allowing the attacker to trick a user into performing malicious actions. (CVE-2016-1937)
 - A cryptographic weakness exists in Network Security Services (NSS) due to incorrect calculations with 'mp_div' and 'mp_exptmod'. (CVE-2016-1938)
 - A cookie injection vulnerability exists due to illegal control characters being permitted in cookie names. A remote attacker can exploit this to inject cookies. (CVE-2016-1939)
 - A flaw exists that is triggered as the delay between the download dialog getting focus and the button getting enabled is too short. If a context-dependent attacker can trick a user into double clicking in a specific location, they can pass the second click through to a dialog below that location. This will allow the attacker to cause the user to perform unintentional actions. (CVE-2016-1941)
 - An URL spoofing vulnerability exists due to a flaw that is triggered during the handling of a URL that invalid for the internal protocol, causing the URL to be pasted into the address bar. A remote attacker can exploit this spoof URLs, allowing the attacker to trick a user into visiting a malicious website. (CVE-2016-1942)
 - An unspecified memory corruption issue exists in the ANGLE graphics library implementation. A remote attacker can exploit this to corrupt memory, resulting in the execution of arbitrary code. (CVE-2016-1944)
 - A wild pointer flaw exists due to improper handling of ZIP files. A remote attacker can exploit this, via a crafted ZIP file, to have an unspecified impact. (CVE-2016-1945)
 - An integer overflow condition exists in the bundled version of libstagefright due to improper handling of MP4 file metadata. A remote attacker can exploit this to execute arbitrary code. (CVE-2016-1946)
 - A flaw exists in the safe browsing feature due to the Application Reputation service being unreachable. A remote attacker can exploit this to convince a user into downloading a malicious executable without being warned. (CVE-2016-1947)

The specific version of Firefox that the system is running is reportedly affected by the following vulnerabilities:

- Brotli contains a flaw in the DecodeVarLenUint8() function in dec/decode.c related to use of uninitialized memory. This may allow a context-dependent attacker to have an unspecified impact. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1930)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains a flaw in the Downscaler::ClearRow() function in image/Downscaler.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the nsComputedDOMStyle::GetStyleContextForElement() and nsComputedDOMStyle::GetStyleContextForElementNoFlush() functions in layout/style/nsComputedDOMStyle.cpp. The issue is triggered when using a frame that is not in the composed document. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw that is triggered when handling fuctions accepting rest parameters. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the CodeGeneratorShared::allocateData() function in js/src/jit/shared/CodeGenerator-shared.h that is triggered when handling out-of-memory error conditions. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the VCMGenericEncoder::Release() function in media/webrtc/trunk/webrtc/modules/video_coding/main/source/generic_encoder.cc. The issue is triggered as the encoded-frame callback is not unregistered when releasing codec databases. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains an unspecified flaw in js/src/vm/HelperThreads.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the JSRuntime::createJitRuntime() function in js/src/jscompartment.cpp that is triggered when handling out-of-memory error conditions. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains an unspecified flaw that is triggered when handling attribute changes. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the HTMLMediaElement::NotifyAddedSource() function in dom/html/HTMLMediaElement.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the nsGIFDecoder2::WriteInternal() function in image/decoders/nsGIFDecoder2.cpp that is triggered when handling GIF image frame bounds. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1931)

- Mozilla Firefox contains a flaw that is triggered when handling WebAudio content. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a use-after-free condition in the nsLayoutUtils::SurfaceFromElement() function in dom/html/HTMLMediaElement.cpp. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the Evaluate() function in js/src/shell/js.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1931)

- Mozilla Firefox contains an overflow condition in the WebGLContext::BufferData() function in dom/canvas/WebGLContextBuffers.cpp that is triggered when handling cache out-of-memory error conditions. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code. (CVE-2016-1935)

- Mozilla Firefox contains a flaw in the BrowserApp::onTabChanged() function in mobile/android/base/java/org/mozilla/gecko/BrowserApp.java. The issue is triggered when handling page scrolling. This may allow a context-dependent attacker to spoof the location. (CVE-2016-1943)

- Mozilla Firefox contains an integer overflow condition that is triggered when handling GIF images. This may allow a context-dependent attacker to have an unspecified impact. No further details have been provided by the vendor. (CVE-2016-1933)

- Mozilla Firefox contains a flaw in the Buffer11::NativeBuffer11::map() function within the ANGLE implementation. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1944)

- Mozilla Firefox for Android contains a flaw in mobile/android/chrome/content/browser.js that is triggered when handling data: URLs. This may allow a context-dependent attacker to spoof the location. (CVE-2016-1940)

- Mozilla Firefox contains a flaw in the safe browsing feature as the Application Reputation service was unreachable. This may allow a context-dependent attacker to trick a user into downloading a malicious executable without the user being warned. (CVE-2016-1947)

- Mozilla Firefox contains an integer overflow condition in the MoofParser::Metadata() function in media/libstagefright/binding/MoofParser.cpp. The issue is triggered when handling MP4 file metadata. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1946)

- Mozilla Firefox contains a flaw in modules/libjar/nsZipArchive.cpp that is triggered when handling ZIP files. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1945)

- Mozilla Firefox contains a flaw in the nsCookieService::SetCookieInternal() function in netwerk/cookie/nsCookieService.cpp as control characters are permitted in cookie names. This may allow a context-dependent attacker to inject cookies. (CVE-2016-1939)

- Mozilla Network Security Services (NSS) contains an unspecified cryptographical issue when handling calculations that contain mp_div or mp_exptmod. This may allow an attacker to trigger potential cryptographic weaknesses. (CVE-2016-1938)

- Mozilla Firefox for Android contains a flaw in mobile/android/chrome/content/browser.js that is triggered as lightweight themes fail to properly secure connections when installing themes. This may allow a remote man-in-the-middle attacker to make changes to the theme.
 (CVE-2016-1948)

- Mozilla Firefox contains a flaw in the protocol handler in toolkit/mozapps/handling/content/dialog.js that is due to the handler treating double click events as two single click events. This may allow a context-dependent attacker to spoof content to cause a user to potentially perform malicious actions, such as downloading attacker controlled software. (CVE-2016-1937)

- Mozilla Firefox for Mac OS X contains a flaw that is triggered as the delay between the download dialog getting focus and the button getting enabled is too short. If a context-dependent attacker can trick a user into double clicking in a specific location, they can pass the second click through to a dialog below that location. This will allow the attacker to cause the user to perform unintentional actions. (CVE-2016-1941)

- Mozilla Firefox contains a flaw in browser/base/content/urlbarBindings.xml that is triggered during the handling of a URL that is invalid for the internal protocol, which will cause the URL to be pasted into the address bar. This may allow a context-dependent attacker to spoof URLs. (CVE-2016-1942)

- Mozilla Network Security Services (NSS) contains a use-after-free error in the ssl3_HandleECDHServerKeyExchange() function. The issue is triggered when handling failed allocations during DHE and ECDHE handshakes. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1978)

ID	Name	Product	Family	Published	Updated	Severity
88637	Ubuntu 14.04 LTS：Firefox 迴歸 (USN-2880-2)	Nessus	Ubuntu Local Security Checks	2/9/2016	10/20/2023	critical
88406	RHEL 5/6/7：firefox (RHSA-2016:0071)	Nessus	Red Hat Local Security Checks	1/27/2016	5/29/2020	critical
88452	Scientific Linux 安全更新：SL5.x、SL6.x、SL7.x i386/x86_64 中的 firefox	Nessus	Scientific Linux Local Security Checks	1/28/2016	1/14/2021	critical
88456	Ubuntu 14.04 LTS：Firefox 漏洞 (USN-2880-1)	Nessus	Ubuntu Local Security Checks	1/28/2016	10/23/2023	critical
88459	Firefox < 44 多种漏洞 (Mac OS X)	Nessus	MacOS X Local Security Checks	1/28/2016	11/20/2019	critical
88549	openSUSE 安全更新：MozillaFirefox / mozilla-nss 和 mozilla-nspr (openSUSE-2016-128)	Nessus	SuSE Local Security Checks	2/3/2016	1/19/2021	critical
88637	Ubuntu 14.04 LTS：Firefox 回归 (USN-2880-2)	Nessus	Ubuntu Local Security Checks	2/9/2016	10/20/2023	critical
88943	Debian DSA-3491-1：icedove - 安全更新 (SLOTH)	Nessus	Debian Local Security Checks	2/25/2016	1/11/2021	critical
9075	Mozilla Firefox < 44.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2/19/2016	3/6/2019	critical
802019	Firefox < 44 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	9/6/2016		critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical