Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 2.0 .10 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0821
Mozilla Firefox 2.0.0.20 and previous versions allows remote malicious users to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element.
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 0.8Mozilla Firefox 0.10.1Mozilla Firefox 1.0.6Mozilla Firefox 1.5Mozilla Firefox 2.0.0.9Mozilla Firefox 1.0.8Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 2.0.0.7Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 1.5.6Mozilla Firefox 1.5.5Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.12
NA
CVE-2008-2808
Mozilla Firefox prior to 2.0.0.15 and SeaMonkey prior to 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote malicious users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.
Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0Mozilla Firefox 2.0 .1Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 2.0 8Mozilla Firefox 2.0 .9Mozilla Firefox 2.0 8Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.1.9Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 2.0 .9Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0 .5Mozilla Firefox 2.0 .6Mozilla Seamonkey 1.1.5Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.1.7
NA
CVE-2008-2933
Mozilla Firefox prior to 2.0.0.16, and 3.x prior to 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote malicious users to access chrome:i URIs, or read arbitrary local files via manipulations involving a ...
Mozilla Firefox 0.10.1Mozilla Firefox 0.8Mozilla Firefox 1.0.2Mozilla Firefox 1.0.3Mozilla Firefox 1.0.4Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.7Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.6Mozilla Firefox 1.5.7Mozilla Firefox 1.5.8Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0 8Mozilla Firefox 3.0Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Firefox 1.0.7Mozilla Firefox 1.0.8
NA
CVE-2008-2806
Mozilla Firefox prior to 2.0.0.15 and SeaMonkey prior to 1.1.10 on Mac OS X allow remote malicious users to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.
Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0 .1Mozilla Firefox 2.0 .10Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 2.0 8Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0Mozilla Firefox 2.0 .6Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0 .9Mozilla Firefox 2.0 8Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.1.9Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 2.0 .9Mozilla Firefox 2.0 .7
NA
CVE-2009-2065
Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to inc...
Mozilla Firefox 0.1Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.9.3Mozilla Firefox 0.9Mozilla Firefox 1.0.6Mozilla Firefox 1.0.7Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.1Mozilla Firefox 1.5Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0 .6Mozilla Firefox 2.0 .9Mozilla Firefox 3.0.5Mozilla Firefox 3.0.6
NA
CVE-2009-0355
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox prior to 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote malicious users to read arbitrary files on a client machine via a crafted IN...
Mozilla Firefox 2.0Mozilla Firefox 3.0.1Mozilla Firefox 0.9.3Mozilla Firefox 1.0.2Mozilla Firefox 1.0.5Mozilla Firefox 2.0.0.9Mozilla Firefox 1.0.8Mozilla Firefox 2.0 .1Mozilla Firefox 2.0 8Mozilla Firefox 2.0.0.10Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.2Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.7Mozilla Firefox 2.0.0.18Mozilla Firefox 0.9 RcMozilla Firefox 2.0.0.3
NA
CVE-2009-0356
Mozilla Firefox prior to 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote malicious users to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors...
Mozilla Firefox 0.1Mozilla Firefox 0.9 RcMozilla Firefox 0.8Mozilla Firefox 2.0.0.12Mozilla Firefox 1.5Mozilla Firefox 2.0 .7Mozilla Firefox 1.5.2Mozilla Firefox 1.5.0.6Mozilla Firefox 1.8Mozilla Firefox 2.0.0.2Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.3Mozilla FirefoxMozilla Firefox 1.5.0.11Mozilla Firefox 1.5.4Mozilla Firefox 1.0.2Mozilla Firefox 3.0.4Mozilla Firefox 2.0 8Mozilla Firefox 2.0 .9Mozilla Firefox 0.9.1Mozilla Firefox 1.0.4Mozilla Firefox 2.0.0.7
NA
CVE-2012-4190
The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox prior to 16.0.1 on CyanogenMod 10, allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via u...
Mozilla Firefox 14.0.1Mozilla Firefox 13.0Mozilla Firefox 10.0.1Mozilla Firefox 9.0.1Mozilla Firefox 6.0.1Mozilla Firefox 5.0Mozilla Firefox 4.0Mozilla Firefox 3.0.14Mozilla Firefox 3.6.4Mozilla Firefox 3.6.2Mozilla Firefox 3.6.25Mozilla Firefox 3.5.13Mozilla Firefox 3.0.5Mozilla Firefox 3.6.13Mozilla Firefox 3.5.7Mozilla Firefox 3.6.15Mozilla Firefox 3.6.7Mozilla Firefox 3.5.15Mozilla Firefox 3.0.6Mozilla Firefox 3.5.3Mozilla Firefox 3.5.9Mozilla Firefox 2.0.0.14
NA
CVE-2009-1306
The jar: URI implementation in Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote malicious users to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded ...
Mozilla Firefox 0.10Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.7Mozilla Firefox 0.9.2Mozilla Firefox 1.0.3Mozilla Firefox 1.0.2Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.0.7Mozilla Firefox 2.0.0.10Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.9Mozilla Firefox 0.9.3Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.0.8
NA
CVE-2009-1308
Cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey allows remote malicious users to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 20...
Mozilla SeamonkeyMozilla Firefox 0.1Mozilla Firefox 0.9 RcMozilla Firefox 0.8Mozilla Firefox 2.0.0.12Mozilla Firefox 1.5Mozilla Firefox 2.0 .7Mozilla Firefox 3.0.7Mozilla Firefox 1.5.2Mozilla Firefox 1.5.0.6Mozilla Firefox 1.8Mozilla Firefox 2.0.0.2Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.4Mozilla Firefox 1.0.2Mozilla Firefox 3.0.4Mozilla Firefox 2.0 8Mozilla Firefox 2.0 .9Mozilla Firefox 3.0.5Mozilla Firefox 0.9.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook