Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 3.0beta5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-1839
Mozilla Firefox 3 prior to 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote malicious users to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-...
Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5Mozilla Firefox 3.0.2Mozilla FirefoxMozilla Firefox 3.0.1Mozilla Firefox 3.0Mozilla Firefox 3.0.6Mozilla Firefox 3.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.1Mozilla Firefox 3.0beta5
NA
CVE-2009-1840
Mozilla Firefox prior to 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote malicious users to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug&quo...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.7Mozilla Firefox 3.0.2Mozilla FirefoxMozilla Firefox 3.0.1Mozilla Firefox 3.0Mozilla Firefox 3.0beta5Mozilla Firefox 3.0.6Mozilla Firefox 3.0.4Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.1Mozilla Firefox 3.0.5Mozilla ThunderbirdMozilla Seamonkey
NA
CVE-2009-1312
Mozilla Firefox prior to 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the co...
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.6Mozilla Firefox 1.5.5Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.1Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.19Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5
NA
CVE-2009-1307
The view-source: URI implementation in Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote malicious users to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file...
Mozilla Firefox 0.1Mozilla Firefox 0.10Mozilla Firefox 0.8Mozilla Firefox 0.9.1Mozilla Firefox 0.9Mozilla Firefox 0.9 RcMozilla Firefox 1.0.4Mozilla Firefox 1.0.7Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 2.0Mozilla Firefox 1.8Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.18Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5
NA
CVE-2009-2467
Mozilla Firefox prior to 3.0.12 and 3.5 prior to 3.5.1 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which trigge...
Mozilla Firefox 0.10.1Mozilla Firefox 0.9.1Mozilla Firefox 3.0.5Mozilla Firefox 3.0.1Mozilla Firefox 2.0.0.19Mozilla Firefox 0.9.3Mozilla Firefox 0.9.2Mozilla Firefox 1.0.1Mozilla Firefox 3.0Mozilla Firefox 1.0.5Mozilla Firefox 2.0.0.21Mozilla Firefox 3.0.7Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.2Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.7Mozilla Firefox 1.5Mozilla Firefox 1.5.5Mozilla Firefox 2.0.0.6
NA
CVE-2009-1308
Cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey allows remote malicious users to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 20...
Mozilla SeamonkeyMozilla Firefox 0.1Mozilla Firefox 0.9 RcMozilla Firefox 0.8Mozilla Firefox 2.0.0.12Mozilla Firefox 1.5Mozilla Firefox 2.0 .7Mozilla Firefox 3.0.7Mozilla Firefox 1.5.2Mozilla Firefox 1.5.0.6Mozilla Firefox 1.8Mozilla Firefox 2.0.0.2Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.4Mozilla Firefox 1.0.2Mozilla Firefox 3.0.4Mozilla Firefox 2.0 8Mozilla Firefox 2.0 .9Mozilla Firefox 3.0.5Mozilla Firefox 0.9.1
NA
CVE-2009-1309
Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote...
Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.9Mozilla Firefox 0.9.3Mozilla Firefox 1.0.6Mozilla Firefox 1.0.1Mozilla Firefox 1.0.8Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.21Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0 .1Mozilla Firefox 3.0.1Mozilla Firefox 2.0 8
NA
CVE-2009-1306
The jar: URI implementation in Mozilla Firefox prior to 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote malicious users to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded ...
Mozilla Firefox 0.10Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.7Mozilla Firefox 0.9.2Mozilla Firefox 1.0.3Mozilla Firefox 1.0.2Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.0.7Mozilla Firefox 2.0.0.10Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.9Mozilla Firefox 0.9.3Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.0.8
NA
CVE-2009-1169
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox prior to 3.0.8 and SeaMonkey prior to 1.1.16 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.
Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.12Mozilla Firefox 3.0.1Mozilla Firefox 0.9Mozilla Firefox 2.0Mozilla Firefox 1.0.3Mozilla Firefox 0.10.1Mozilla Firefox 0.9.1Mozilla Firefox 2.0.0.19Mozilla Firefox 3.0Mozilla Firefox 0.9.3Mozilla Firefox 0.9.2Mozilla Firefox 1.0.2Mozilla Firefox 2.0 .1Mozilla Firefox 2.0 .10Mozilla Firefox 2.0.0.21Mozilla Firefox 2.0.0.17Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10
NA
CVE-2009-1836
Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle malicious users to execute arbi...
Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Thunderbird 2.0.0.11Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 2.0 .13Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.7.3Mozilla Thunderbird 1.0Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 1.5.0.3Mozilla Thunderbird 1.5.0.4Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook