Mozilla

Firefox

2920 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2014-1506

  • EPSS 2.08%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted ap...

9.1

CVE-2014-1508

Exploit
  • EPSS 0.99%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of...

8.8

CVE-2014-1509

Exploit
  • EPSS 0.81%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a ...

9.8

CVE-2014-1510

Exploit
  • EPSS 76.45%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment t...

9.8

CVE-2014-1511

Exploit
  • EPSS 75.96%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.

10

CVE-2014-1512

Exploit
  • EPSS 17.91%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by trigge...

9.3

CVE-2014-1513

Exploit
  • EPSS 1.61%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to exec...

9.8

CVE-2014-1514

Exploit
  • EPSS 4.17%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to ex...

6.8

CVE-2013-6167

  • EPSS 0.38%
  • Veröffentlicht 15.02.2014 14:57:08
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter t...

7.5

CVE-2014-1487

Exploit
  • EPSS 0.61%
  • Veröffentlicht 06.02.2014 05:44:25
  • Zuletzt bearbeitet 25.11.2025 17:50:16

The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information v...