mozilla firefox 2.0.0.1 vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Mozilla Firefox 2.0.0.2 allows remote malicious users to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of...

Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0

5

CVSSv2

Mozilla Firefox 2.0.0.1 up to and including 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote malicious users to bypass phishing protection via multiple / (slash) characters in the URL.

Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.3

9.3

CVSSv2

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 2.0.0.5 and Thunderbird prior to 2.0.0.5 allow remote malicious users to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.

Mozilla Firefox 2.0 Mozilla Firefox 2.0.0.1 Mozilla Thunderbird 2.0.0.3 Mozilla Thunderbird 2.0.0.4 Mozilla Thunderbird 2.0.0.1 Mozilla Thunderbird 2.0.0.2 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.4 Mozilla Thunderbird 2.0.0.0

9.3

CVSSv2

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox prior to 2.0.0.5 and Thunderbird prior to 2.0.0.5 allow remote malicious users to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.

Mozilla Thunderbird 2.0.0.1 Mozilla Thunderbird 2.0.0.2 Mozilla Firefox 2.0.0.4 Mozilla Thunderbird 2.0.0.0 Mozilla Firefox 2.0 Mozilla Firefox 2.0.0.1 Mozilla Thunderbird 2.0.0.3 Mozilla Thunderbird 2.0.0.4 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.3

7.1

CVSSv2

Directory traversal vulnerability in Mozilla Firefox prior to 2.0.0.4 on Windows allows remote malicious users to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI.

Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0 Mozilla Firefox 2.0.0.1

4.3

CVSSv2

Mozilla Firefox prior to 1.5.0.10 and 2.x prior to 2.0.0.2, and SeaMonkey prior to 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote malicious users to bypass content filters that use regular expressions.

Mozilla Firefox 2.0.0.1 Mozilla Seamonkey Mozilla Firefox 1.5.0.10 Mozilla Firefox 2.0

9.3

CVSSv2

Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey prior to 1.0.8 allow remote malicious users to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window obje...

Mozilla Firefox 1.5.0.9 Mozilla Firefox 2.0.0.1 Mozilla Seamonkey

9.3

CVSSv2

Multiple unspecified vulnerabilities in Mozilla Firefox prior to 2.0.0.5 allow remote malicious users to execute arbitrary code via a crafted XPCNativeWrapper.

Mozilla Firefox 2.0 Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.4

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 2.0.0.5 allows remote malicious users to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (2) setTimeout function, pro...

Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.4 Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0

9.3

CVSSv2

Mozilla Firefox prior to 2.0.0.5 allows remote malicious users to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."

Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.4 Mozilla Firefox 2.0 Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.2

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook