Mozilla

Firefox

2867 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-0167

  • EPSS 22.87%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash)...

7.6

CVE-2010-0168

  • EPSS 9.93%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow ...

5

CVE-2010-0169

  • EPSS 0.42%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings i...

4.3

CVE-2010-0170

  • EPSS 0.5%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specifi...

4.3

CVE-2010-0171

  • EPSS 0.52%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) at...

4.3

CVE-2010-0172

  • EPSS 0.54%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might a...

9.3

CVE-2010-1028

  • EPSS 10.41%
  • Veröffentlicht 19.03.2010 21:30:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a b...

10

CVE-2010-0159

  • EPSS 2.15%
  • Veröffentlicht 22.02.2010 13:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute ...

10

CVE-2010-0160

  • EPSS 5.18%
  • Veröffentlicht 22.02.2010 13:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap me...

4.3

CVE-2010-0162

  • EPSS 0.82%
  • Veröffentlicht 22.02.2010 13:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving S...