Vlad

**Nome do software vulnerável e versões afetadas** Microsoft Edge (baseado no Chromium) (versões afetadas não especificadas) **Descrição** O problema está relacionado a uma vulnerabilidade de contorno de recurso de segurança no Microsoft Edge. Está associado a um controle de acesso inadequado, que pode ser explorado por um invasor remoto para contornar as restrições de segurança existentes. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 25.0 Firefox ESR versions 24.x prior to 24.1 Thunderbird versions prior to 24.1 SeaMonkey versions prior to 2.22 **Description** The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors. **Recommendations** For Mozilla Firefox versions prior to 25.0, update to version 25.0 or later. For Firefox ESR versions 24.x prior to 24.1, update to version 24.1 or later. For Thunderbird versions prior to 24.1, update to version 24.1 or later. For SeaMonkey versions prior to 2.22, update to version 2.22 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 24.0 on Android **Description** The issue is related to an untrusted search path vulnerability in the GL tracing functionality. This allows attackers to execute arbitrary code via a Trojan horse .so file in a world-writable directory. **Recommendations** For versions prior to 24.0 on Android, update to version 24.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.6.7 Thunderbird versions prior to 3.1.1 **Description** The issue is related to the improper implementation of read restrictions for CANVAS elements. This allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion. **Recommendations** For Mozilla Firefox versions prior to 3.6.7, update to version 3.6.7 or later to resolve the issue. For Thunderbird versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue.