Mozilla

Firefox

3102 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2010-3178

  • EPSS 0.86%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window an...

9.3

CVE-2010-3179

  • EPSS 22.55%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or...

9.3

CVE-2010-3180

  • EPSS 5.43%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessin...

6.9

CVE-2010-3181

  • EPSS 0.06%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the c...

6.9

CVE-2010-3182

  • EPSS 0.08%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allow...

9.3

CVE-2010-3183

  • EPSS 6.98%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls tha...

4.3

CVE-2010-3170

  • EPSS 1.16%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-th...

7.5

CVE-2010-3173

  • EPSS 2.32%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which m...

9.3

CVE-2010-3174

  • EPSS 3.2%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly ex...

9.3

CVE-2010-3175

  • EPSS 3.23%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arb...