Mozilla

Seamonkey

704 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2008-5012

  • EPSS 2.04%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:56

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin...

9.3

CVE-2008-5013

  • EPSS 4.81%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:56

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically u...

10

CVE-2008-5014

  • EPSS 5.87%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:57

jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifyin...

5

CVE-2008-5016

  • EPSS 2.29%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:57

The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other conse...

10

CVE-2008-5017

  • EPSS 3.84%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:57

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (c...

10

CVE-2008-5018

  • EPSS 3.84%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:57

The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient...

9.3

CVE-2008-5021

  • EPSS 3.63%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:58:58

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying pr...

7.5

CVE-2008-5022

  • EPSS 3.03%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:59:03

The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrar...

7.5

CVE-2008-5023

  • EPSS 3.26%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:59:05

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR f...

7.5

CVE-2008-5024

Exploit
  • EPSS 3.64%
  • Veröffentlicht 13.11.2008 11:30:01
  • Zuletzt bearbeitet 16.06.2026 22:59:05

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection at...