Mozilla

Firefox

2920 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2007-3089

  • EPSS 25.02%
  • Veröffentlicht 06.06.2007 21:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript cod...

7.1

CVE-2007-3072

Exploit
  • EPSS 0.63%
  • Veröffentlicht 06.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI.

7.8

CVE-2007-3073

  • EPSS 1.48%
  • Veröffentlicht 06.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI.

4.3

CVE-2007-3074

Exploit
  • EPSS 0.6%
  • Veröffentlicht 06.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory via a resource:// URI.

4.3

CVE-2007-1362

  • EPSS 45.04%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter w...

9.3

CVE-2007-2867

  • EPSS 31.32%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of servic...

9.3

CVE-2007-2868

  • EPSS 36.66%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of se...

4.3

CVE-2007-2869

  • EPSS 15.92%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in...

4.3

CVE-2007-2870

  • EPSS 8%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add...

4.3

CVE-2007-2871

  • EPSS 16.41%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: th...