Mozilla

Firefox

3102 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-4209

  • EPSS 2.07%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which make...

9.3

CVE-2012-4210

  • EPSS 3.83%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbi...

10

CVE-2012-4212

  • EPSS 1.53%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corrupt...

9.3

CVE-2012-4213

Exploit
  • EPSS 2.14%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory cor...

9.3

CVE-2012-4214

Exploit
  • EPSS 2.34%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attac...

9.3

CVE-2012-4215

Exploit
  • EPSS 2.34%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote ...

9.3

CVE-2012-4216

Exploit
  • EPSS 4.11%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to exe...

9.3

CVE-2012-4217

Exploit
  • EPSS 2.14%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap ...

10

CVE-2012-4218

  • EPSS 1.53%
  • Veröffentlicht 21.11.2012 12:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service ...

4.3

CVE-2012-4201

Exploit
  • EPSS 1.96%
  • Veröffentlicht 21.11.2012 12:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code...