Mozilla

Firefox

2867 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-4194

Exploit
  • EPSS 1.36%
  • Veröffentlicht 29.10.2012 18:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object (aka window.location), ...

4.3

CVE-2012-4195

  • EPSS 0.96%
  • Veröffentlicht 29.10.2012 18:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and prin...

6.4

CVE-2012-4196

Exploit
  • EPSS 0.96%
  • Veröffentlicht 29.10.2012 18:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a pro...

10

CVE-2012-4190

  • EPSS 8.53%
  • Veröffentlicht 12.10.2012 10:44:20
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execut...

9.3

CVE-2012-4191

  • EPSS 1.68%
  • Veröffentlicht 12.10.2012 10:44:20
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and ...

4.3

CVE-2012-4192

Exploit
  • EPSS 0.87%
  • Veröffentlicht 12.10.2012 10:44:20
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.

6.8

CVE-2012-4193

Exploit
  • EPSS 1.41%
  • Veröffentlicht 12.10.2012 10:44:20
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, w...

4.3

CVE-2012-3992

  • EPSS 1.14%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XS...

9.3

CVE-2012-3993

  • EPSS 81.83%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallT...

4.3

CVE-2012-3994

  • EPSS 0.93%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Obj...