Diễn đàn hỗ trợ Firefox

Hi, During some tests I found that FF 115.19.0esr can still execute arbitrary JS similarly to CVE-2024-4367. I’ve checked the versions and > 115.11esr should be patched. Any payload with ‘/JS’ taken from https://github.com/luigigubello/PayloadsAllThePDFs/tree/main will do. Since this is probably important – FontMatrix is *not* working (no JS), original PoC (https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf) is also *not* working. I also wasn’t able to call an external script and so far haven’t found any path to exploit it beyond an alertbox. However, it still bothers me a lot and I’d like to know whether it’s the correct, expected behavior with FF+pdf.js, is it a vulnerability, or maybe my browser was somehow corrupted or is using some other mechanism that’s not within your control (my settings? about:config?).

Steps to re-create: 1. Open file in notepad 2. Add ‘/OpenAction 99 0 R’ after ‘lang’ in ‘1 0 obj section’ 3. After ‘endobj’ add ‘99 0 obj <</Type /Action /S /JavaScript /JS (app.alert\(1\);)>>’ 4. Result – alertbox popping twice

What do these question marks mean? Do they indicate tentatively planned releases?

Bottom line: will there be 115.22 through 115.24?

/uploads/images/2025-03-23-07-41-00-a333e6.png

I have been blocked from making payments from the billpayer on my accounts with credit union. Even my Gmail says I am using an outdated browser but my settings history says it is all up to date. Bills are due and I need help in clearing this up. I am on Windows 7 Home Premium.Is there something further I need to adjust?

I am aware that Windows 10 will continue seeing support for the foreseeable future, but what about older versions and builds of 10?

I ask because I'm currently on a machine that physically can't update beyond version 1909 build 18363.1198 due to an issue that occurred on my machine in November 2020. So I've been stuck at that version and build of 10 for basically the last five years. While I'm trying to see if I can update it to 22h2, the last known version of Windows 10 with the hopes of enrolling in the extended security updates, that may not be feasible due to how old the mahcine itself is. Will Firefox continue to support all versions of 10 for the foreseeable future and not just those on the ESU? If so, great. If not, what version will be the last that can support the version I'm on? I don't have a Windows 11 machine yet on a full time basis (I'm testing an 11 machine out, but I may not end up keeping it) and I prefer 10 to begin with, so I would like to know when I need to stop updating Firefox itself, so that I can be sure I'll be able to keep using the browser with my current OS.

I tried accessing Peacock but was told they only support version 127+. I checked my version is 115.xxx but says browser is up to date. What is going on?

I have a Windows 7 machine and I am unable to download firefox to it but I've read that there's a Firefox ESR for Windows 7 and 8 can anyone help me by sending me a link to the exact spot where I need to get that to download it?

Russ

I'm on a Mac running OS 10.14.6. I have consistently updated, and currently have Firefox 115.20.0esr. Yesterday a tax website said my Firefox was out of date, and wanted me to update. From within Firefox I clicked to update, and it downloaded an installer. But when I installed this new update, it's the same version: 115.20.0esr.

Can you shed any light on this? Is there any reason to keep this "new" version of Firefox?

Thank you for your help!

There are no OS updates available for my computer hardware (nor have there been for quite a few years), just to quash that right off the bat.

The last release for 10.11 is 78.15.0esr (64-bit).

A number of websites do not load or outright refuse to load (the whole cloudflare hosting system, imgur, daily motion, youtube nags about it, even the login system for mozilla support renders quite oddly).

So I'm requesting an updated release. I realize there may be limitations due to libraries that have similarly abandoned 10.11. Thanks.

I have an Intel I5 PC that runs MS Win XP. The reason that I'm still running that ancient OS is because of whats inside it. I have two old boards in it that I still use and quit honestly can't afford several thousand dollars to replace them. And the new machine to go with them.

I need to get online to download the few pieces of software I need That are still out there. But like most sites they examine your machine to see what versions you need and it's a download and install package. So I can't use a different PC.

My question is: Is there a version of Firefox I can download that will work on XP, and not be ignored like is done to IE 8. And that I can then transfer to the XP (service pack 3) box for installation?

Hello Mozilla, I have a Lenovo G700 laptop with the WINDOWS 7 Pro operating system My browser is Firefox 115.19.0 (see file Firefox.jpg) During the security check in online banking I am told that the browser is out of date (see firefox2.jpg) But I can only update the version and it says "Firefox is up to date" What's wrong with that?

Best regards Heimo Ganzoort

Hello Everyone,

I am using actually 140.9. ESR. How can I cange to the "normal" Version?

Or could I use browser-VPN in ESR too ?

Many Thanks for answering. Chris