Mozilla

Firefox

3462 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-0059

  • EPSS 0.97%
  • Veröffentlicht 02.03.2011 20:00:01
  • Zuletzt bearbeitet 16.06.2026 23:26:42

Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugi...

9.3

CVE-2011-0061

  • EPSS 4.7%
  • Veröffentlicht 02.03.2011 20:00:01
  • Zuletzt bearbeitet 16.06.2026 23:26:43

Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.

10

CVE-2011-0062

  • EPSS 3.85%
  • Veröffentlicht 02.03.2011 20:00:01
  • Zuletzt bearbeitet 16.06.2026 23:26:43

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arb...

9.3

CVE-2010-3766

  • EPSS 7%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:28

Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.

9.3

CVE-2010-3767

  • EPSS 4.81%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:29

Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via a JavaScript array with many elements.

9.3

CVE-2010-3768

  • EPSS 4.81%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:29

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows...

9.3

CVE-2010-3769

  • EPSS 4.62%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:29

The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers t...

4.3

CVE-2010-3770

  • EPSS 4.45%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:29

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2)...

6.8

CVE-2010-3771

  • EPSS 2.32%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:29

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element into an about:blank page, which allows remote attackers to execute arbitrary JavaScript code with chrome priv...

9.3

CVE-2010-3772

  • EPSS 4.81%
  • Veröffentlicht 10.12.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:30

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV ...