Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (13)
| Vulnerability |
Summary |
Aliases |
|
VCID-15ft-jxfa-pkgc
|
Mozilla developer Daniel Stenberg reported that the DNS
resolver in Firefox for Android uses an insufficiently random algorithm when
generating random numbers for the unique identifier. This was derived from an
old version of the Bionic libc library and suffered from
insufficient randomness in the pseudo-random number generator (PRNG) as described by Roee
Hay and Roi Saltzman.
This leaves Firefox on Android potentially vulnerable to DNS poisoning
attacks because an attacker may be able to predict the identifier used, allowing
for the spoofing of web sites and cookie theft.
This flaw did not affect desktop versions of Mozilla products
and only Firefox for Android was affected.
|
CVE-2015-0800
|
|
VCID-55jd-xx14-d3h3
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0802
|
|
VCID-9n5g-6m3r-3uez
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0808
|
|
VCID-e193-1kgh-5kda
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0805
|
|
VCID-ffrc-3bx6-jbav
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0801
|
|
VCID-gr7k-2v4p-kbfg
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0816
|
|
VCID-grdt-g3kf-3uh3
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0815
|
|
VCID-h7zg-petj-hqfv
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0812
|
|
VCID-jnj4-g593-37d7
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0811
|
|
VCID-p7k1-93e6-cfha
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0803
|
|
VCID-wh23-7b49-n3g5
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0813
|
|
VCID-yq8w-7uvd-dyhk
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0810
|
|
VCID-ys1x-t7un-ayhr
|
Multiple vulnerabilities have been found in Mozilla Firefox and
Thunderbird, the worst of which may allow user-assisted execution of
arbitrary code.
|
CVE-2015-0807
|