Mozilla

Firefox

2867 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2006-1730

  • EPSS 26.48%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing prop...

4.3

CVE-2006-1731

  • EPSS 2.82%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are calle...

4.3

CVE-2006-1732

  • EPSS 2.21%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS)...

6.8

CVE-2006-1733

  • EPSS 24.27%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute...

6.8

CVE-2006-1734

Exploit
  • EPSS 32.74%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the "clone parent" internal func...

9.3

CVE-2006-1735

Exploit
  • EPSS 39.01%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javas...

2.6

CVE-2006-1736

  • EPSS 1.62%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image li...

9.3

CVE-2006-1739

  • EPSS 33.12%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary ...

2.6

CVE-2006-1740

  • EPSS 2.19%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing ...

4.3

CVE-2006-1741

Exploit
  • EPSS 1.95%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new p...