Package Instance

Mozilla developers identified and fixed several memory safety bugs in the
browser engine used in Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain circumstances, and we
presume that with enough effort at least some of these could be exploited to run
arbitrary code.In general these flaws cannot be exploited through email in the
Thunderbird product because scripting is disabled, but are
potentially a risk in browser or browser-like contexts.

Security researcher Seb Patane reported an issue with the
Mozilla Maintenance Service on Windows. This issue allows unprivileged users to
local privilege escalation through the system privileges used by the service
when interacting with local malicious software. This allows the user to bypass
integrity checks leading to local privilege escalation. Local file system access
is necessary in order for this issue to be exploitable and it cannot be
triggered through web content.

Security researcher Abhishek Arya (Inferno) of the Google
Chrome Security Team used the Address Sanitizer tool to discover a series of
use-after-free, out of bounds read, and invalid write problems rated as moderate
to critical as security issues in shipped software. Some of these issues are
potentially exploitable, allowing for remote code execution. We would also like
to thank Abhishek for reporting additional use-after-free flaws in
dir=auto code introduced during Firefox development. These were
fixed before general release.

Mozilla community member Ms2ger discovered that some
DOMSVGZoomEvent functions are used without being properly
initialized, causing uninitialized memory to be used when they are called by web
content. This could lead to a information leakage to sites depending on the
contents of this uninitialized memory.
In general these flaws cannot be exploited through email in the
Thunderbird product because scripting is disabled, but are
potentially a risk in browser or browser-like contexts.

Security researcher Cody Crews reported a method to call a
content level constructor that allows for this constructor to have chrome
privileged access. This affects chrome object wrappers (COW) and allows for
write actions on objects when only read actions should be allowed. This can lead
to cross-site scripting (XSS) attacks. 
In general these flaws cannot be exploited through email in the
Thunderbird product because scripting is disabled, but are
potentially a risk in browser or browser-like contexts.

Security researcher Nils reported a use-after-free when
resizing video while playing. This could allow for arbitrary code execution.
In general these flaws cannot be exploited through email in the
Thunderbird product because scripting is disabled, but are
potentially a risk in browser or browser-like contexts.