(CVE-2023-25735) - An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior. (CVE-2023-0767) - Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. (CVE-2023-25743) - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.

Other versions of Firefox are unaffected. (CVE-2023-25730) - A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome. (CVE-2023-25728) - A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-05 advisory. Description The version of Firefox installed on the remote macOS or Mac OS X host is prior to 110.0.

Functions can be added through add-ons created by third-party developers, the most popular of which include the NoScript JavaScript disabling utility, Tab Mix Plus customizer, FoxyTunes media player control toolbar, Adblock Plus ad blocking utility, StumbleUpon (website discovery), Foxmarks Bookmark Synchronizer (bookmark synchronizer), DownThemAll! download enhancer, and Web Developer toolbar.Synopsis A web browser installed on the remote macOS or Mac OS X host is affected by multiple vulnerabilities. The browser began as a fork of the Navigator component of the Mozilla Application Suite Firefox has since become the foundation's main development focus (along with its Thunderbird mail and news client), and has replaced the Mozilla Suite as their official main software release.įirefox includes tabbed browsing, a spell checker, incremental find, live bookmarking, a download manager, and an integrated search system that uses the user's desired search engine. Mozilla Firefox is a free, open source, cross-platform, graphical web browser developed by the Mozilla Corporation and hundreds of volunteers.

Firefox os x 10.11.6