Mozilla

Firefox

2867 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-4194

Exploit
  • EPSS 1.36%
  • Published 29.10.2012 18:55:01
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object (aka window.location), ...

4.3

CVE-2012-4195

  • EPSS 0.96%
  • Published 29.10.2012 18:55:01
  • Last modified 11.04.2025 00:51:21

The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and prin...

6.4

CVE-2012-4196

Exploit
  • EPSS 0.96%
  • Published 29.10.2012 18:55:01
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a pro...

10

CVE-2012-4190

  • EPSS 8.53%
  • Published 12.10.2012 10:44:20
  • Last modified 11.04.2025 00:51:21

The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execut...

9.3

CVE-2012-4191

  • EPSS 1.68%
  • Published 12.10.2012 10:44:20
  • Last modified 11.04.2025 00:51:21

The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and ...

4.3

CVE-2012-4192

Exploit
  • EPSS 0.87%
  • Published 12.10.2012 10:44:20
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.

6.8

CVE-2012-4193

Exploit
  • EPSS 1.41%
  • Published 12.10.2012 10:44:20
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, w...

4.3

CVE-2012-3992

  • EPSS 1.14%
  • Published 10.10.2012 17:55:02
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XS...

9.3

CVE-2012-3993

  • EPSS 81.83%
  • Published 10.10.2012 17:55:02
  • Last modified 11.04.2025 00:51:21

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallT...

4.3

CVE-2012-3994

  • EPSS 0.93%
  • Published 10.10.2012 17:55:02
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Obj...