Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 3.5.16 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2008-7293
Mozilla Firefox prior to 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle malicious users to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Tran...
Mozilla Firefox 3.5.6Mozilla Firefox 3.5.10Mozilla Firefox 3.0.16Mozilla Firefox 3.0.14Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.4Mozilla Firefox 2.0.0.2Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.1Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.6Mozilla Firefox 1.0.1Mozilla Firefox 1.0.6Mozilla Firefox 1.0
5
CVSSv2
CVE-2011-2370
Mozilla Firefox prior to 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote malicious users to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.10Mozilla Firefox 3.5.9Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3Mozilla Firefox 3.5.8Mozilla Firefox 3.5Mozilla Firefox 3.0.10Mozilla Firefox 3.0.9Mozilla Firefox 3.0.2Mozilla Firefox 3.0.1Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.18Mozilla Firefox 2.0.0.6Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 1.5.8Mozilla Firefox 1.0.2
9.3
CVSSv2
CVE-2010-3766
Use-after-free vulnerability in Mozilla Firefox prior to 3.5.16 and 3.6.x prior to 3.6.13, and SeaMonkey prior to 2.0.11, allows remote malicious users to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.9Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.5.0.9Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.9
4.3
CVSSv2
CVE-2010-3774
The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox prior to 3.5.16 and 3.6.x prior to 3.6.13, and SeaMonkey prior to 2.0.11, does not properly handle (1) about:neterror and (2) about:certerror pages, which allows remote malicious users to sp...
Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.2Mozilla Firefox 3.6.10Mozilla Firefox 3.6.9Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.18Mozilla Seamonkey 1.1.19Mozilla Seamonkey 1.1.9Mozilla Seamonkey 1.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0
7.2
CVSSv2
CVE-2011-2980
Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox prior to 3.6.20, Thunderbird 3.x prior to 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded...
Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6Mozilla Firefox 1.0.7Mozilla Firefox 1.0.6Mozilla Firefox 3.5.15
10
CVSSv2
CVE-2011-2378
The appendChild function in Mozilla Firefox prior to 3.6.20, Thunderbird 3.x prior to 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote malicious users to execute arbitrary code via unspecified vectors that lead to derefe...
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.5.9Mozilla Firefox 3.5.8Mozilla Firefox 3.0.12Mozilla Firefox 3.0.11Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0Mozilla Firefox 1.5Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.0.7Mozilla Firefox 1.0.3Mozilla Firefox 1.0.2Mozilla Firefox 3.5.11Mozilla Firefox 3.5.12Mozilla Firefox 3.6.12
9.3
CVSSv2
CVE-2010-3767
Integer overflow in the NewIdArray function in Mozilla Firefox prior to 3.5.16 and 3.6.x prior to 3.6.13, and SeaMonkey prior to 2.0.11, allows remote malicious users to execute arbitrary code via a JavaScript array with many elements.
Mozilla Firefox 3.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.2Mozilla Firefox 3.6.10Mozilla Firefox 3.6.9Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.14Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.5Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5
6.8
CVSSv2
CVE-2010-3771
Mozilla Firefox prior to 3.5.16 and 3.6.x prior to 3.6.13, and SeaMonkey prior to 2.0.11, does not properly handle injection of an ISINDEX element into an about:blank page, which allows remote malicious users to execute arbitrary JavaScript code with chrome privileges via vectors...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.9Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.8Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.18Mozilla Seamonkey 1.1.19Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.1.9Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0Mozilla Seamonkey 1.0.7
9.3
CVSSv2
CVE-2010-3772
Mozilla Firefox prior to 3.5.16 and 3.6.x prior to 3.6.13, and SeaMonkey prior to 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote malicious users to execute arbitrary code via vectors involving a DIV element within a t...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.9Mozilla Firefox 3.6.11Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.12Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.18Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.1.9Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0
4.3
CVSSv2
CVE-2015-0819
The UITour::onPageEvent function in Mozilla Firefox prior to 36.0 does not ensure that an API call originates from a foreground tab, which allows remote malicious users to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.
Mozilla Firefox 30.0Mozilla Firefox 3.6.9Mozilla Firefox 3.6.8Mozilla Firefox 3.6.26Mozilla Firefox 3.6.25Mozilla Firefox 3.6.19Mozilla Firefox 3.6.18Mozilla Firefox 3.6.10Mozilla Firefox 3.6Mozilla Firefox 3.5.3Mozilla Firefox 3.5.2Mozilla Firefox 3.5.13Mozilla Firefox 3.5.12Mozilla Firefox 3.0.6Mozilla Firefox 3.0.5Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0Mozilla Firefox 29.0.1Mozilla Firefox 24.1.1Mozilla Firefox 24.1Mozilla Firefox 20.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook