遠端 Windows 主機上安裝的 Firefox 版本比 44 版舊。因此受到以下弱點影響：

- 存在一個 Cookie 插入弱點，這是因為將不合法控制字元儲存為 Cookie 值，違反 RFC6265 所導致。遠端攻擊者可惡意利用此弱點插入 Cookie。(CVE-2015-7208)

- 存在多個會讓遠端攻擊者執行任意程式碼的不明記憶體損毀問題。
 (CVE-2016-1930、CVE-2016-1931)

- 存在一個整數溢位情形，這是因為在去交錯式過程中不當剖析 GIF 影像所導致。遠端攻擊者可加以惡意利用，透過特製的 GIF 影像，造成拒絕服務情形或是執行任意程式碼。(CVE-2016-1933)

- WebGL 中存在一個緩衝區溢位情形，其會在處理快取記憶體不足錯誤情形時觸發。遠端攻擊者可惡意利用這點，執行任意程式碼。(CVE-2016-1935)

- 存在一個內容偽造弱點，這是因為通訊協定處置程式對話方塊，將按兩下事件視為兩次的按一下事件所導致。遠端攻擊者可惡意利用此偽造內容，讓攻擊者能夠誘騙使用者執行惡意動作。(CVE-2016-1937)

- Network Security Services (NSS) 中存在一個密碼編譯弱點，這是因為「mp_div」及「mp_exptmod」的錯誤計算所導致。(CVE-2016-1938)

- 存在一個 Cookie 插入弱點，這是因為在 Cookie 名稱中允許使用不合法控制字元所導致。遠端攻擊者可惡意利用此弱點插入 Cookie。
 (CVE-2016-1939)

- 存在一個 URL 偽造弱點，這是因為一個對內部通訊協定而言無效的 URL，在處理過程中觸發一個瑕疵，造成將 URL 貼到位址列中所導致。遠端攻擊者可惡意利用此偽造 URL，讓攻擊者能夠誘騙使用者造訪惡意網站。(CVE-2016-1942)

- ANGLE 圖庫實作中存在一個不明的記憶體損毀問題。遠端攻擊者可惡意利用此問題損毀記憶體，進而導致任意程式碼執行。(CVE-2016-1944)

- 存在一個環境指標瑕疵，這是因為不當處理 ZIP 檔案所導致。遠端攻擊者可惡意利用此瑕疵，透過特製 ZIP 檔案造成不明影響。
 (CVE-2016-1945)

- 隨附的 libstagefright 版本中存在一個整數溢位情形，這是因為不當處理 MP4 檔案詮釋資料所導致。遠端攻擊者可惡意利用這點，執行任意程式碼。(CVE-2016-1946)

- 安全瀏覽功能中存在一個瑕疵，這是因為無法連線至 Application Reputation 服務所導致。遠端攻擊者可以惡意利用此瑕疵，說服使用者在未受警告的情況下下載惡意執行檔。(CVE-2016-1947)

- Network Security Services (NSS) 中存在一個釋放後使用錯誤，這是因為 DHE 和 ECDHE 交握期間不當處理失敗的配置所導致。攻擊者可加以利用，解除參照已釋放的記憶體，進而導致執行任意程式碼。
 (CVE-2016-1978)

Mozilla Foundation 報告：

MFSA 2016-01 其他記憶體安全性危險 (rv:44.0 / rv:38.6)

MFSA 2016-02 剖析 GIF 格式影像時發生記憶體不足損毀

MFSA 2016-03 在記憶體不足的配置後，WebGL 中發生緩衝區溢位

MFSA 2016-04 Firefox 允許在 cookie 名稱中設定控制字元

MFSA 2016-06 在通訊協定處置程式對話方塊中的使用者按一下事件後遺漏延遲

MFSA 2016-09 位址列偽造攻擊

MFSA 2016-10 在程式碼檢查過程中發現不安全的記憶體操控

MFSA 2016-11 Firefox 43 中停用了 Application Reputation 服務

遠端 Mac OS X 主機上安裝的 Firefox 版本比 43 版舊。因此受到以下弱點影響：

- 存在多個不明記憶體損毀問題，是因不當驗證使用者提供的輸入所導致。遠端攻擊者可利用這些問題，即誘騙使用者造訪特製的網頁，藉此執行任意程式碼。(CVE-2015-7201)

- 存在多個不明記憶體損毀問題，是因不當驗證使用者提供的輸入所導致。遠端攻擊者可利用這些問題，即誘騙使用者造訪特製的網頁，藉此執行任意程式碼。(CVE-2015-7202)

- LoadFontFamilyData() 函式中存有溢位，造成此溢位的原因是未能正確驗證使用者輸入。遠端攻擊者可加以惡意利用以造成緩衝區溢位，進而導致任意程式碼執行。(CVE-2015-7203)

- 由於在 JavaScript 變數指派期間不當處理未設限的物件，導致 PropertyWriteNeedsTypeBarrier() 函式中出現瑕疵。遠端攻擊者可惡意利用這點，執行任意程式碼。
 (CVE-2015-7204)

- RtpHeaderParser::Parse() 函式中存有一個瑕疵，造成此瑕疵的原因是不當處理 RTP 標頭。未經驗證的遠端攻擊者可加以利用，透過特製的 RTP 標頭來執行任意程式碼。(CVE-2015-7205)

- 存有一個同源繞過弱點，透過函式與 iframe 主控頁面時，重新導向可觸發此弱點。攻擊者可利用此弱點來存取跨來源 URL 資訊。(CVE-2015-7207)

- SetCookieInternal() 函式允許將控制字元 (例如 ASCII 碼 11) 插入到 cookie 中，這原本是不正確的做法。攻擊者可利用此瑕疵插入 cookie。(CVE-2015-7208)

- 存在一個釋放後使用錯誤，造成此錯誤的原因是在關閉的 PeerConnections 上對於資料通道作業的防止不當。攻擊者可加以利用，解除參照已釋放的記憶體，進而導致執行任意程式碼。
 (CVE-2015-7210)

- 由於在 data: URI 中不當處理雜湊 (#) 字元，ParseURI() 函式中存在一個瑕疵。攻擊者可利用此問題來偽造 URL 列。
 (CVE-2015-7211)

- readMetaData() 函式中存有一個整數溢位情形，造成此溢位的原因是在處理特製的 MP4 檔案時不當驗證使用者提供的輸入。攻擊者可惡意利用這點執行任意程式碼。(CVE-2015-7213)

- 存在一個同源繞過弱點，是因不當處理「data:」與「view-source:」URI 所致。攻擊者可利用此弱點從跨網站 URL 及本機檔案讀取資料。(CVE-2015-7214)

- 存在一個資訊洩漏弱點，是因不當處理 web 背景工作中的錯誤事件所致。攻擊者可利用此弱點來存取敏感的跨來源資訊。(CVE-2015-7215)

- 存在多個整數反向溢位，是因在處理 HTTP2 框架時不當驗證使用者輸入所致。攻擊者可加以利用來造成應用程式損毀，進而導致拒絕服務。
 (CVE-2015-7218、CVE-2015-7219)

- XDRBuffer::grow() 函式中存有溢位，是因未能正確驗證使用者輸入所致。攻擊者可加以惡意利用而造成緩衝區溢位，進而導致任意程式碼執行。
 (CVE-2015-7220)

- GrowCapacity() 函式中存有溢位，是因未能正確驗證使用者輸入所致。攻擊者可加以惡意利用而造成緩衝區溢位，進而導致任意程式碼執行。
 (CVE-2015-7221)

- parseChunk() 函式的隨附版本 libstagefright 中存有一個整數反向溢位情形，於處理「covr」區塊時觸發。未經驗證的遠端攻擊者可加以利用，透過特製的媒體內容來使應用程式損毀或執行任意程式碼。(CVE-2015-7222)

- 由於無法限制 WebExtension API 在沒有 WebExtension 主體的情況下插入文件，導致 Extension.jsm 指令碼中出現一個權限提升弱點。攻擊者可加以利用來執行跨網站指令碼攻擊，導致在使用者的瀏覽器工作階段中執行任意指令碼。(CVE-2015-7223)

Mozilla Project 報告：

MFSA 2015-134 其他記憶體安全性危險 (rv:43.0 / rv:38.5)

MFSA 2015-135 JavaScript 變數指派因未設限的物件而發生損毀

MFSA 2015-136 使用 perfomance.getEntries 和歷程記錄導覽時違反同源原則

MFSA 2015-137 Firefox 允許在 cookie 中設定控制字元

MFSA 2015-138 資料通道在損毀之後使用時，WebRTC 中發生的釋放後使用問題

MFSA 2015-139 配置極大紋理時發生的整數溢位

MFSA 2015-140 透過 web 背景工作錯誤事件發生的跨來源資訊洩漏

MFSA 2015-141 資料 URI 中的雜湊遭錯誤剖析

MFSA 2015-142 因 HTTP/2 中格式錯誤的框架引發的 DOS

MFSA 2015-143 因 Jasper 程式庫中的瑕疵，使用格式錯誤的影像時 Linux 檔案選擇器損毀

MFSA 2015-144 在程式碼檢查過程中發現緩衝區溢位

MFSA 2015-145 在程式碼檢查過程中發現反向溢位

MFSA 2015-146 在 64 位元版本中播放 MP4 而產生的整數溢位

MFSA 2015-147 在 libstagefright 中處理 MP4 詮釋資料時出現整數反向溢位和緩衝區溢位

MFSA 2015-148 WebExtension API 中的權限提升弱點

MFSA 2015-149 透過資料與檢視來源 URI 發動的跨網站讀取攻擊

此 MozillaFirefox 更新可修正下列安全性問題：

- MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 其他記憶體安全危險

- MFSA 2015-135/CVE-2015-7204 (bmo#1216130) JavaScript 變數指派因未設限的物件而發生損毀

- MFSA 2015-136/CVE-2015-7207 (bmo#1185256) 使用 perfomance.getEntries 和歷程記錄導覽時違反同源原則

- MFSA 2015-137/CVE-2015-7208 (bmo#1191423) Firefox 允許在 cookie 中設定控制字元

- MFSA 2015-138/CVE-2015-7210 (bmo#1218326) 資料通道在損毀之後使用時，WebRTC 中發生的釋放後使用問題

- MFSA 2015-139/CVE-2015-7212 (bmo#1222809) 配置極大紋理時發生的整數溢位

- MFSA 2015-140/CVE-2015-7215 (bmo#1160890) 透過 web 背景工作錯誤事件發生的跨來源資訊洩漏

- MFSA 2015-141/CVE-2015-7211 (bmo#1221444) 資料 URI 中的雜湊遭錯誤剖析

- MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820) 因 HTTP/2 中格式錯誤的框架引發的 DOS

- MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059、bmo#1203078) 因 Jasper 程式庫中的瑕疵，使用格式錯誤的影像時 Linux 檔案選擇器損毀

- MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221 (bmo#1201183、bmo#1178033、bmo#1199400) 在程式碼檢查過程中發現緩衝區溢位

- MFSA 2015-145/CVE-2015-7205 (bmo#1220493) 在程式碼檢查過程中發現反向溢位

- MFSA 2015-146/CVE-2015-7213 (bmo#1206211) 在 64 位元版本中播放 MP4 而產生的整數溢位

- MFSA 2015-147/CVE-2015-7222 (bmo#1216748) 在 libstagefright 中處理 MP4 詮釋資料時出現整數反向溢位和緩衝區溢位

- MFSA 2015-148/CVE-2015-7223 (bmo#1226423) WebExtension API 中的權限提升弱點

- MFSA 2015-149/CVE-2015-7214 (bmo#1228950) 透過資料與檢視來源 URI 發動的跨網站讀取攻擊

The version of Firefox installed on the remote Windows host is prior to 44. It is, therefore, affected by the following vulnerabilities :

  - A cookie injection vulnerability exists due to illegal     control characters being stored as cookie values in     violation of RFC6265. A remote attacker can exploit this     to inject cookies. (CVE-2015-7208)

  - Multiple unspecified memory corruption issues exist that     allow a remote attacker to execute arbitrary code.
    (CVE-2016-1930, CVE-2016-1931)

  - An integer overflow condition exists due to improper     parsing of GIF images during deinterlacing. A remote     attacker can exploit this, via a specially crafted GIF     image, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2016-1933)

  - A buffer overflow condition exists in WebGL that is     triggered when handling cache out-of-memory error     conditions. A remote attacker can exploit this to     execute arbitrary code. (CVE-2016-1935)

  - A content spoofing vulnerability exists due to the     protocol handler dialog treating double click events as     two single click events. A remote attacker can exploit     this to spoof content, allowing the attacker to trick a     user into performing malicious actions. (CVE-2016-1937)

  - A cryptographic weakness exists in Network Security     Services (NSS) due to incorrect calculations with     'mp_div' and 'mp_exptmod'. (CVE-2016-1938)

  - A cookie injection vulnerability exists due to illegal     control characters being permitted in cookie names. A     remote attacker can exploit this to inject cookies.
    (CVE-2016-1939)

  - An URL spoofing vulnerability exists due to a flaw that     is triggered during the handling of a URL that invalid     for the internal protocol, causing the URL to be pasted     into the address bar. A remote attacker can exploit this     spoof URLs, allowing the attacker to trick a     user into visiting a malicious website. (CVE-2016-1942)

  - An unspecified memory corruption issue exists in the     ANGLE graphics library implementation. A remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-1944)

  - A wild pointer flaw exists due to improper handling of     ZIP files. A remote attacker can exploit this, via a     crafted ZIP file, to have an unspecified impact.
    (CVE-2016-1945)

  - An integer overflow condition exists in the bundled     version of libstagefright due to improper handling of     MP4 file metadata. A remote attacker can exploit this     to execute arbitrary code. (CVE-2016-1946)

  - A flaw exists in the safe browsing feature due to the     Application Reputation service being unreachable. A     remote attacker can exploit this to convince a user     into downloading a malicious executable without being     warned. (CVE-2016-1947)

  - A use-after-free error exists in Network Security     Services (NSS) due to improper handling of failed     allocations during DHE and ECDHE handshakes. An attacker     can exploit this to dereference already freed memory,     resulting in the execution of arbitrary code.
    (CVE-2016-1978)

Mozilla Foundation reports :

MFSA 2016-01 Miscellaneous memory safety hazards (rv:44.0 / rv:38.6)

MFSA 2016-02 Out of Memory crash when parsing GIF format images

MFSA 2016-03 Buffer overflow in WebGL after out of memory allocation

MFSA 2016-04 Firefox allows for control characters to be set in cookie names

MFSA 2016-06 Missing delay following user click events in protocol handler dialog

MFSA 2016-09 Addressbar spoofing attacks

MFSA 2016-10 Unsafe memory manipulation found through code inspection

MFSA 2016-11 Application Reputation service disabled in Firefox 43

The version of Firefox installed on the remote Mac OS X host is prior to 43. It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7201)

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7202)

  - An overflow condition exists in the LoadFontFamilyData()     function due to improper validation of user-supplied     input. A remote attacker can exploit this to cause a     buffer overflow, resulting in the execution of arbitrary     code. (CVE-2015-7203)

  - A flaw exists in the PropertyWriteNeedsTypeBarrier()     function due to improper handling of unboxed objects     during JavaScript variable assignments. A remote     attacker can exploit this to execute arbitrary code.
    (CVE-2015-7204)

  - A flaw exists in the RtpHeaderParser::Parse() function     due to improper handling of RTP headers. An     unauthenticated, remote attacker can exploit this, via     specially crafted RTP headers, to execute arbitrary     code. (CVE-2015-7205)

  - A same-origin bypass vulnerability exists that is     triggered after a redirect when the function is used     alongside an iframe to host a page. An attacker can     exploit this to gain access to cross-origin URL     information. (CVE-2015-7207)

  - The SetCookieInternal() function improperly allows     control characters (e.g. ASCII code 11) to be inserted     into cookies. An attacker can exploit this to inject     cookies. (CVE-2015-7208)

  - A use-after-free error exists due to improper prevention     of datachannel operations on closed PeerConnections. An     attacker can exploit this to dereference already freed     memory, resulting in the execution of arbitrary code.
    (CVE-2015-7210)

  - A flaw exists in the ParseURI() function due to improper     handling of a hash (#) character in the data: URI. An     attacker can exploit this to spoof the URL bar.
    (CVE-2015-7211)

  - An integer overflow condition exists in the     readMetaData() function due to improper validation of     user-supplied input when handling a specially crafted     MP4 file. An attacker can exploit this to execute     arbitrary code. (CVE-2015-7213)

  - A same-origin bypass vulnerability exists due to     improper handling of 'data:' and 'view-source:' URIs. An     attacker can exploit this to read data from cross-site     URLs and local files. (CVE-2015-7214)

  - An information disclosure vulnerability exists due to     improper handling of error events in web workers. An     attacker can exploit this to gain access to sensitive     cross-origin information. (CVE-2015-7215)

  - Multiple integer underflow conditions exist due to     improper  validation of user-supplied input when     handling HTTP2 frames. An attacker can exploit these to     crash the application, resulting in a denial of service.
    (CVE-2015-7218, CVE-2015-7219)

  - An overflow condition exists in the XDRBuffer::grow()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7220)

  - An overflow condition exists in the GrowCapacity()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7221)

  - An integer underflow condition exists in the bundled     version of libstagefright in the parseChunk() function     that is triggered when handling 'covr' chunks. An     unauthenticated, remote attacker can exploit this, via     specially crafted media content, to crash the     application or execute arbitrary code. (CVE-2015-7222)

  - A privilege escalation vulnerability exists in the     Extension.jsm script due to a failure to restrict     WebExtension APIs from being injected into documents     without WebExtension principals. An attacker can exploit     this to conduct a cross-site scripting attack, resulting     in the execution of arbitrary script code in a user's     browser session. (CVE-2015-7223)

The Mozilla Project reports :

MFSA 2015-134 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)

MFSA 2015-135 Crash with JavaScript variable assignment with unboxed objects

MFSA 2015-136 Same-origin policy violation using perfomance.getEntries and history navigation

MFSA 2015-137 Firefox allows for control characters to be set in cookies

MFSA 2015-138 Use-after-free in WebRTC when datachannel is used after being destroyed

MFSA 2015-139 Integer overflow allocating extremely large textures

MFSA 2015-140 Cross-origin information leak through web workers error events

MFSA 2015-141 Hash in data URI is incorrectly parsed

MFSA 2015-142 DOS due to malformed frames in HTTP/2

MFSA 2015-143 Linux file chooser crashes on malformed images due to flaws in Jasper library

MFSA 2015-144 Buffer overflows found through code inspection

MFSA 2015-145 Underflow through code inspection

MFSA 2015-146 Integer overflow in MP4 playback in 64-bit versions

MFSA 2015-147 Integer underflow and buffer overflow processing MP4 metadata in libstagefright

MFSA 2015-148 Privilege escalation vulnerabilities in WebExtension APIs

MFSA 2015-149 Cross-site reading attack through data and view-source URIs

This update for MozillaFirefox fixes the following security issues :

  - MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous     memory safety hazards

  - MFSA 2015-135/CVE-2015-7204 (bmo#1216130) Crash with     JavaScript variable assignment with unboxed objects

  - MFSA 2015-136/CVE-2015-7207 (bmo#1185256) Same-origin     policy violation using perfomance.getEntries and history     navigation

  - MFSA 2015-137/CVE-2015-7208 (bmo#1191423) Firefox allows     for control characters to be set in cookies

  - MFSA 2015-138/CVE-2015-7210 (bmo#1218326) Use-after-free     in WebRTC when datachannel is used after being destroyed

  - MFSA 2015-139/CVE-2015-7212 (bmo#1222809) Integer     overflow allocating extremely large textures

  - MFSA 2015-140/CVE-2015-7215 (bmo#1160890) Cross-origin     information leak through web workers error events

  - MFSA 2015-141/CVE-2015-7211 (bmo#1221444) Hash in data     URI is incorrectly parsed

  - MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818,     bmo#1194820) DOS due to malformed frames in HTTP/2

  - MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059,     bmo#1203078) Linux file chooser crashes on malformed     images due to flaws in Jasper library

  - MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221     (bmo#1201183, bmo#1178033, bmo#1199400) Buffer overflows     found through code inspection

  - MFSA 2015-145/CVE-2015-7205 (bmo#1220493) Underflow     through code inspection

  - MFSA 2015-146/CVE-2015-7213 (bmo#1206211) Integer     overflow in MP4 playback in 64-bit versions

  - MFSA 2015-147/CVE-2015-7222 (bmo#1216748) Integer     underflow and buffer overflow processing MP4 metadata in     libstagefright

  - MFSA 2015-148/CVE-2015-7223 (bmo#1226423) Privilege     escalation vulnerabilities in WebExtension APIs

  - MFSA 2015-149/CVE-2015-7214 (bmo#1228950) Cross-site     reading attack through data and view-source URIs

The version of Firefox is prior to 43.0 and is affected by multiple vulnerabilities : 

 - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues by convincing a user to visit a specially crafted web page, resulting in the execution of arbitrary code. (CVE-2015-7201) 
 - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues by convincing a user to visit a specially crafted web page, resulting in the execution of arbitrary code. (CVE-2015-7202) 
 - An overflow condition exists in the 'LoadFontFamilyData()' function due to improper validation of user-supplied input. A remote attacker can exploit this to cause a buffer overflow, resulting in the execution of arbitrary code. (CVE-2015-7203) 
 - A flaw exists in the 'PropertyWriteNeedsTypeBarrier()' function due to improper handling of unboxed objects during JavaScript variable assignments. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-7204) 
 - A flaw exists in the 'RtpHeaderParser::Parse()' function due to improper handling of RTP headers. An unauthenticated, remote attacker can exploit this, via specially crafted RTP headers, to execute arbitrary code. (CVE-2015-7205) 
 - A same-origin bypass vulnerability exists that is triggered after a redirect when the function is used alongside an iframe to host a page. An attacker can exploit this to gain access to cross-origin URL information. (CVE-2015-7207) 
 - The 'SetCookieInternal()' function improperly allows control characters (e.g. ASCII code 11) to be inserted into cookies. An attacker can exploit this to inject cookies. (CVE-2015-7208) 
 - A use-after-free error exists due to improper prevention of datachannel operations on closed PeerConnections. An attacker can exploit this to dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-7210) 
 - A flaw exists in the 'ParseURI()' function due to improper handling of a hash (#) character in the 'data:' URI. An attacker can exploit this to spoof the URL bar. (CVE-2015-7211) 
 - An overflow condition exists in the 'AllocateForSurface()' function due to improper validation of user-supplied input when handling texture allocation in graphics operations. An attacker can exploit this to execute arbitrary code. (CVE-2015-7212) 
 - An integer overflow condition exists in the 'readMetaData()' function due to improper validation of user-supplied input when handling a specially crafted MP4 file. An attacker can exploit this to execute arbitrary code. (CVE-2015-7213) 
 - A same-origin bypass vulnerability exists due to improper handling of 'data:' and 'view-source:' URIs. An attacker can exploit this to read data from cross-site URLs and local files. (CVE-2015-7214) 
 - An information disclosure vulnerability exists due to improper handling of error events in web workers. An attacker can exploit this to gain access to sensitive cross-origin information. (CVE-2015-7215) 
 - The gdk-pixbuf configuration on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image. (CVE-2015-7216) 
 - The gdk-pixbuf configuration on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image. (CVE-2015-7217) 
 - Multiple integer underflow conditions exist due to improper validation of user-supplied input when handling HTTP2 frames. An attacker can exploit these to crash the application, resulting in a denial of service. (CVE-2015-7218, CVE-2015-7219) 
 - An overflow condition exists in the 'XDRBuffer::grow()' function due to improper validation of user-supplied input. An attacker can exploit this to cause a buffer overflow, resulting in the execution of arbitrary code. (CVE-2015-7220) 
 - An overflow condition exists in the 'GrowCapacity()' function due to improper validation of user-supplied input. An attacker can exploit this to cause a buffer overflow, resulting in the execution of arbitrary code. (CVE-2015-7221) 
 - An integer underflow condition exists in the bundled version of libstagefright in the 'parseChunk()' function that is triggered when handling 'covr' chunks. An unauthenticated, remote attacker can exploit this, via specially crafted media content, to crash the application or execute arbitrary code. (CVE-2015-7222) 
 - A privilege escalation vulnerability exists in the Extension.jsm script due to a failure to restrict WebExtension APIs from being injected into documents without WebExtension principals. An attacker can exploit this to conduct a cross-site scripting attack, resulting in the execution of arbitrary script code in a user's browser session. (CVE-2015-7223)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
88461	Firefox < 44 多個弱點	Nessus	Windows	2016/1/28	2019/11/20	critical
88512	FreeBSD：mozilla -- 多個弱點 (4f00dac0-1e18-4481-95af-7aaad63fd303)	Nessus	FreeBSD Local Security Checks	2016/2/2	2021/1/4	critical
87474	Firefox < 43 多個弱點 (Mac OS X)	Nessus	MacOS X Local Security Checks	2015/12/17	2019/11/20	critical
87385	FreeBSD：mozilla -- 多個弱點 (2c2d1c39-1396-459a-91f5-ca03ee7c64c6)	Nessus	FreeBSD Local Security Checks	2015/12/16	2021/1/6	critical
87620	openSUSE 安全性更新：MozillaFirefox (openSUSE-2015-942)	Nessus	SuSE Local Security Checks	2015/12/29	2021/1/19	critical
88461	Firefox < 44 Multiple Vulnerabilities	Nessus	Windows	2016/1/28	2019/11/20	critical
88512	FreeBSD : mozilla -- multiple vulnerabilities (4f00dac0-1e18-4481-95af-7aaad63fd303)	Nessus	FreeBSD Local Security Checks	2016/2/2	2021/1/4	critical
87474	Firefox < 43 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2015/12/17	2019/11/20	critical
87385	FreeBSD : mozilla -- multiple vulnerabilities (2c2d1c39-1396-459a-91f5-ca03ee7c64c6)	Nessus	FreeBSD Local Security Checks	2015/12/16	2021/1/6	critical
87620	openSUSE Security Update : MozillaFirefox (openSUSE-2015-942)	Nessus	SuSE Local Security Checks	2015/12/29	2021/1/19	critical
9058	Mozilla Firefox < 43.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/1/27	2019/3/6	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical