Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 2.0.0.21 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-2465
Mozilla Firefox prior to 3.0.12 and Thunderbird allow remote malicious users to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSin...
Mozilla Firefox 0.10Mozilla Firefox 0.8Mozilla Firefox 3.0.5Mozilla Firefox 2.0.0.20Mozilla Firefox 1.0.4Mozilla Firefox 1.0.7Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 1.0Mozilla Firefox 0.3Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 2.0Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 2.0.0.18Mozilla Thunderbird 2.0.0.2Mozilla Thunderbird 2.0.0.19
NA
CVE-2009-2466
The JavaScript engine in Mozilla Firefox prior to 3.0.12 and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLooku...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 1.0.1Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 3.0.7Mozilla Firefox 2.0.0.17Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5Mozilla Firefox 3.0.4Mozilla Thunderbird 2.0.0.3Mozilla Firefox 2.0.0.14Mozilla Firefox 0.9.1
NA
CVE-2009-2462
The browser engine in Mozilla Firefox prior to 3.0.12 and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a S...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 0.9.2Mozilla Firefox 1.0.1Mozilla Firefox 3.0Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 2.0 .10Mozilla Firefox 2.0 .4Mozilla Firefox 3.0.7Mozilla Firefox 2.0.0.17Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.14
NA
CVE-2009-2463
Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox prior to 3.0.12, Thunderbird prior to 2.0.0.24, and SeaMonkey prior to 1.1.19 allow remote malicious users to cause a denial of service (mem...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 1.0.1Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 2.0 .10Mozilla Firefox 2.0 .4Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 3.0.3
NA
CVE-2009-2464
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox prior to 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vector...
Mozilla Firefox 2.0.0.14Mozilla Firefox 0.9.1Mozilla Firefox 0.9Mozilla Firefox 1.0Mozilla Firefox 1.0.3Mozilla Firefox 2.0.0.9Mozilla Firefox 1.5Mozilla Firefox 2.0.0.11Mozilla Firefox 1.4.1Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 1.5.0.11Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 0.9.2Mozilla Firefox 1.0.1Mozilla Firefox 2.0.0.12Mozilla Firefox 3.0.1Mozilla Firefox 2.0Mozilla Firefox 0.9.3
NA
CVE-2009-1312
Mozilla Firefox prior to 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the co...
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.6Mozilla Firefox 1.5.5Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.1Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.19Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5
NA
CVE-2009-1307
The view-source: URI implementation in Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote malicious users to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file...
Mozilla Firefox 0.1Mozilla Firefox 0.10Mozilla Firefox 0.8Mozilla Firefox 0.9.1Mozilla Firefox 0.9Mozilla Firefox 0.9 RcMozilla Firefox 1.0.4Mozilla Firefox 1.0.7Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 2.0Mozilla Firefox 1.8Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.18Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5
NA
CVE-2009-1310
Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox prior to 3.0.9 allows user-assisted remote malicious users to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.9.3Mozilla Firefox 0.7Mozilla Firefox 1.0Mozilla Firefox 1.0.3Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0Mozilla Firefox 2.0.0.7Mozilla Firefox 3.0.1Mozilla Firefox 2.0 8Mozilla Firefox 3.0.2Mozilla Firefox 3.0
NA
CVE-2009-2061
Mozilla Firefox prior to 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect t...
Mozilla Firefox 0.1Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.9Mozilla Firefox 0.9 RcMozilla Firefox 1.0.6Mozilla Firefox 1.0.7Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.1Mozilla Firefox 1.5.8Mozilla Firefox 1.5Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.4Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0 .1Mozilla Firefox 2.0 .4Mozilla Firefox 3.0.4Mozilla Firefox 3.0.6Mozilla Firefox 0.2
NA
CVE-2009-2065
Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to inc...
Mozilla Firefox 0.1Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.9.3Mozilla Firefox 0.9Mozilla Firefox 1.0.6Mozilla Firefox 1.0.7Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.1Mozilla Firefox 1.5Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0 .6Mozilla Firefox 2.0 .9Mozilla Firefox 3.0.5Mozilla Firefox 3.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook