CVE-2006-1735
- EPSS 39.01%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javas...
CVE-2006-1734
- EPSS 32.74%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the "clone parent" internal func...
CVE-2006-1733
- EPSS 24.27%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute...
CVE-2006-1731
- EPSS 2.82%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are calle...
CVE-2006-1729
- EPSS 1.82%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file...
CVE-2006-1728
- EPSS 29.8%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypt...
CVE-2006-1727
- EPSS 5.04%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to t...
CVE-2006-1724
- EPSS 27.34%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via atta...
CVE-2006-0749
- EPSS 40.33%
- Veröffentlicht 14.04.2006 10:02:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via...
- EPSS 29.39%
- Veröffentlicht 09.12.2005 15:03:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not...