Mozilla

Firefox

2867 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.6

CVE-2006-2538

  • EPSS 0.74%
  • Published 22.05.2006 23:10:00
  • Last modified 03.04.2025 01:03:51

IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service (application crash), possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/r...

2.6

CVE-2006-2332

  • EPSS 0.8%
  • Published 12.05.2006 00:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.5.0.3 allows remote attackers to cause a denial of service via a web page with a large number of IMG elements in which the SRC attribute is a mailto URI. NOTE: another researcher found that the web page caused a temporary browser s...

5

CVE-2006-2057

  • EPSS 0.72%
  • Published 26.04.2006 20:06:00
  • Last modified 03.04.2025 01:03:51

Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Micro...

5.1

CVE-2006-1993

Exploit
  • EPSS 57.32%
  • Published 25.04.2006 12:50:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which ca...

5.1

CVE-2006-1942

  • EPSS 2.94%
  • Published 20.04.2006 22:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-i...

10

CVE-2006-1790

  • EPSS 13.62%
  • Published 14.04.2006 19:02:00
  • Last modified 03.04.2025 01:03:51

A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.

9.3

CVE-2006-1737

  • EPSS 26.15%
  • Published 14.04.2006 18:02:00
  • Last modified 03.04.2025 01:03:51

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary bytecode via ...

5

CVE-2006-1738

  • EPSS 29.79%
  • Published 14.04.2006 18:02:00
  • Last modified 03.04.2025 01:03:51

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) by changing the (1) -moz-grid and (...

9.3

CVE-2006-0748

  • EPSS 13.05%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via "an invalid and non-sensical ordering of table-related tags" that...

9.3

CVE-2006-0749

  • EPSS 40.33%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via...