CVE-2010-0167
- EPSS 22.87%
- Published 25.03.2010 21:00:00
- Last modified 11.04.2025 00:51:21
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash)...
- EPSS 0.42%
- Published 25.03.2010 21:00:00
- Last modified 11.04.2025 00:51:21
The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings i...
CVE-2010-0171
- EPSS 0.52%
- Published 25.03.2010 21:00:00
- Last modified 11.04.2025 00:51:21
Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) at...
CVE-2009-3385
- EPSS 1.39%
- Published 23.03.2010 00:53:22
- Last modified 11.04.2025 00:51:21
The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e...
CVE-2010-0161
- EPSS 1.5%
- Published 23.03.2010 00:53:22
- Last modified 11.04.2025 00:51:21
The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial o...
CVE-2010-0163
- EPSS 5.44%
- Published 23.03.2010 00:53:22
- Last modified 11.04.2025 00:51:21
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly ...
- EPSS 2.15%
- Published 22.02.2010 13:00:02
- Last modified 11.04.2025 00:51:21
The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute ...
- EPSS 5.18%
- Published 22.02.2010 13:00:02
- Last modified 11.04.2025 00:51:21
The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap me...
CVE-2010-0162
- EPSS 0.82%
- Published 22.02.2010 13:00:02
- Last modified 11.04.2025 00:51:21
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving S...
- EPSS 7.86%
- Published 22.02.2010 13:00:01
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that at...