Mozilla Firefox ESR Security Updates(mfsa_2017-18_2017-19)-Windows

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities.

The multiple flaws exists due to, - XUL injection in the style editor in devtools. - Use-after-free in WebSockets during disconnection. - Use-after-free with marquee during window resizing. - Use-after-free while deleting attached editor DOM node. - Use-after-free with image observers. - Use-after-free resizing image elements. - Buffer overflow manipulating ARIA attributes in DOM. - Buffer overflow while painting non-displayable SVG. - Out-of-bounds read with cached style data and pseudo-elements. - Same-origin policy bypass with iframes through page reloads. - Domain hijacking through AppCache fallback. - Buffer overflow viewing certificates with an extremely long OID. - Memory protection bypass through WindowsDllDetourPatcher. - Spoofing following page navigation with data: protocol and modal alerts. - WindowsDllDetourPatcher allocates memory without DEP protections. - CSP containing sandbox is improperly applied. - Memory safety bugs.

Mozilla Firefox ESR version before 52.3 on Windows.

Checks if a vulnerable version is present on the target host.

Upgrade to Mozilla Firefox ESR version 52.3 or later.