FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mozilla -- multiple vulnerabilities

Affected packages
firefox < 40.0.3,1
linux-firefox < 40.0.3,1
firefox-esr < 38.2.1,1

Details

VuXML ID 237a201c-888b-487f-84d3-7d92266381d6
Discovery 2015-08-27
Entry 2015-08-28

The Mozilla Project reports:

MFSA 2015-95 Add-on notification bypass through data URLs

MFSA 2015-94 Use-after-free when resizing canvas element during restyling

References

CVE Name CVE-2015-4497
CVE Name CVE-2015-4498
URL https://www.mozilla.org/security/advisories/mfsa2015-94/
URL https://www.mozilla.org/security/advisories/mfsa2015-95/