This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wo archive tread sia. Meɖekuku bia biabia yeye ne ehia kpeɖeŋu.

Firefox Bug [Crash] Bounty, CVE and Target Milestone

  • 1 ŋuɖoɖo
  • 1 masɔmasɔ sia le esi
  • 2 views
  • Nuɖoɖo mlɔetɔ the-edmeister

XowiaLab
XowiaLab
more options

Hello, I submitted a Firefox 37.0.2 bug on bugzilla that may lead to security loophole. I have three questions if you can answer. 1) Is there any bounty for this bug? 2) Will you generate CVE Identifier for this bug 3) What is Target Milestone - Firefox 40 in bugzilla report.

Here is the bug URL - https://bugzilla.mozilla.org/show_bug.cgi?id=1159604

Hello, I submitted a Firefox 37.0.2 bug on bugzilla that may lead to security loophole. I have three questions if you can answer. 1) Is there any bounty for this bug? 2) Will you generate CVE Identifier for this bug 3) What is Target Milestone - Firefox 40 in bugzilla report. Here is the bug URL - https://bugzilla.mozilla.org/show_bug.cgi?id=1159604

All Replies (1)

the-edmeister
the-edmeister
  • Moderator
more options
  1. I doubt it, its an OOM bug - Out Of Memory. Just my opinion, though. If it was deemed a real security issue that bug would have been locked immediately by the developers, as is their practice with Security bugs.
  2. Same as #1.
  3. Firefox 40 is the current Alpha 1, Nightly development, "central" version, 2 versions away from Release. [Release Date 2015-08-11] - https://wiki.mozilla.org/RapidRelease/Calendar#Future_branch_dates

I believe the place to ask those questions is here: https://groups.google.com/forum/#!forum/mozilla.dev.platform