Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 17.0.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-0787
Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox prior to 19.0.2, Firefox ESR 17.x prior to 17.0.4, Thunderbird prior to 17.0.4, Thunderbird ESR 17.x prior to 17.0.4, and SeaMonkey prior to 2.16.1 allow...
Mozilla Firefox 19.0Mozilla FirefoxMozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla ThunderbirdMozilla Thunderbird 17.0.1Mozilla Thunderbird Esr 17.0.3Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.1Mozilla Thunderbird Esr 17.0.2Mozilla Seamonkey 2.16Mozilla Seamonkey
NA
CVE-2013-1672
The Mozilla Maintenance Service in Mozilla Firefox prior to 21.0, Firefox ESR 17.x prior to 17.0.6, Thunderbird prior to 17.0.6, and Thunderbird ESR 17.x prior to 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junct...
Mozilla Firefox 20.0Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 19.0.2Mozilla FirefoxMozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.4Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0.5Mozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0.1Mozilla ThunderbirdMozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0Mozilla Thunderbird Esr 17.0.4Mozilla Thunderbird Esr 17.0.3Mozilla Thunderbird Esr 17.0.1Mozilla Thunderbird EsrMozilla Thunderbird Esr 17.0.2
NA
CVE-2013-0799
Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox prior to 20.0, Firefox ESR 17.x prior to 17.0.5, Thunderbird prior to 17.0.5, and Thunderbird ESR 17.x prior to 17.0.5 on Windows allows local users to gain privileges via crafted arguments.
Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla FirefoxMozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.4Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0.3Mozilla Thunderbird Esr 17.0.3Mozilla Thunderbird Esr 17.0.4Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.2Mozilla Thunderbird Esr 17.0.1
NA
CVE-2013-1685
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 allows remote malicious users to execute arbitrary code or cause a de...
Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 20.0.1Mozilla FirefoxMozilla Firefox 19.0.2Mozilla Firefox 20.0Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.5Mozilla Firefox Esr 17.0.6Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.4Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.2Mozilla ThunderbirdMozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird Esr 17.0.2Mozilla Thunderbird Esr 17.0.3
NA
CVE-2013-1687
The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 do not properly restrict XBL user-defined functions, which allow...
Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 19.0.2Mozilla FirefoxMozilla Firefox 20.0Mozilla Firefox 20.0.1Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0.6Mozilla Firefox Esr 17.0.4Mozilla Firefox Esr 17.0.5Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla ThunderbirdMozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird Esr 17.0.2Mozilla Thunderbird Esr 17.0.3
NA
CVE-2013-1690
Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote malicious users to cause a denial of ser...
Mozilla Firefox 20.0Mozilla Firefox 20.0.1Mozilla FirefoxMozilla Firefox 19.0.1Mozilla Firefox 19.0.2Mozilla Firefox 19.0Mozilla Firefox Esr 17.0.4Mozilla Firefox Esr 17.0.5Mozilla Firefox Esr 17.0.6Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.1Mozilla Thunderbird 17.0.5Mozilla ThunderbirdMozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird Esr 17.0.5Mozilla Thunderbird Esr 17.0.6
NA
CVE-2013-1692
Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote malicious users to conduct cross-si...
Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 19.0.2Mozilla Firefox 20.0Mozilla Firefox 20.0.1Mozilla FirefoxMozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.4Mozilla Firefox Esr 17.0.5Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0.6Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla ThunderbirdMozilla Thunderbird Esr 17.0.3Mozilla Thunderbird Esr 17.0.4
NA
CVE-2013-1693
The SVG filter implementation in Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 allows remote malicious users to read pixel values, and possibly bypass the Same Origin Policy and read text fro...
Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 20.0.1Mozilla FirefoxMozilla Firefox 19.0.2Mozilla Firefox 20.0Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.6Mozilla Firefox Esr 17.0.4Mozilla Firefox Esr 17.0.5Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.3Mozilla ThunderbirdMozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.1
NA
CVE-2013-1697
The XrayWrapper implementation in Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote malicious users to execute...
Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 20.0.1Mozilla FirefoxMozilla Firefox 19.0.2Mozilla Firefox 20.0Mozilla Firefox Esr 17.0.2Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.5Mozilla Firefox Esr 17.0.6Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.4Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.3Mozilla ThunderbirdMozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.1
NA
CVE-2013-1706
Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox prior to 23.0, Firefox ESR 17.x prior to 17.0.8, Thunderbird prior to 17.0.8, and Thunderbird ESR 17.x prior to 17.0.8 allows local users to gain privileges via a long path...
Mozilla Firefox Esr 17.0.1Mozilla Firefox Esr 17.0Mozilla Firefox Esr 17.0.5Mozilla Firefox Esr 17.0.6Mozilla Firefox Esr 17.0.3Mozilla Firefox Esr 17.0.4Mozilla Firefox Esr 17.0.7Mozilla Firefox Esr 17.0.2Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.3Mozilla ThunderbirdMozilla Thunderbird 17.0.6Mozilla Thunderbird Esr 17.0.7Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.3Mozilla Thunderbird Esr 17.0.4Mozilla Thunderbird Esr 17.0.1Mozilla Thunderbird Esr 17.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook