Mozilla

Firefox

2939 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2007-3072

Exploit
  • EPSS 0.65%
  • Veröffentlicht 06.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI.

7.8

CVE-2007-3073

  • EPSS 1.48%
  • Veröffentlicht 06.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI.

4.3

CVE-2007-3074

Exploit
  • EPSS 0.62%
  • Veröffentlicht 06.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory via a resource:// URI.

4.3

CVE-2007-1362

  • EPSS 45.91%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter w...

9.3

CVE-2007-2867

  • EPSS 32.12%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of servic...

9.3

CVE-2007-2868

  • EPSS 37.51%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of se...

4.3

CVE-2007-2869

  • EPSS 16.44%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in...

4.3

CVE-2007-2870

  • EPSS 8.3%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add...

4.3

CVE-2007-2871

  • EPSS 16.95%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: th...

7.1

CVE-2007-2671

Exploit
  • EPSS 6.76%
  • Veröffentlicht 14.05.2007 23:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.