Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 3.6.20 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2996
Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x prior to 3.6.23 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox 3.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla Firefox 3.6.22Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18
NA
CVE-2011-2998
Integer underflow in Mozilla Firefox 3.6.x prior to 3.6.23 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.
Mozilla Firefox 3.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.11Mozilla Firefox 3.6.18Mozilla Firefox 3.6.19Mozilla Firefox 3.6.8Mozilla Firefox 3.6.9Mozilla Firefox 3.6.16Mozilla Firefox 3.6.17Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.14Mozilla Firefox 3.6.15Mozilla Firefox 3.6.22
NA
CVE-2011-2980
Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox prior to 3.6.20, Thunderbird 3.x prior to 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded...
Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6Mozilla Firefox 1.0.7Mozilla Firefox 1.0.6Mozilla Firefox 3.5.15
NA
CVE-2011-2378
The appendChild function in Mozilla Firefox prior to 3.6.20, Thunderbird 3.x prior to 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote malicious users to execute arbitrary code via unspecified vectors that lead to derefe...
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.5.9Mozilla Firefox 3.5.8Mozilla Firefox 3.0.12Mozilla Firefox 3.0.11Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0Mozilla Firefox 1.5Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.0.7Mozilla Firefox 1.0.3Mozilla Firefox 1.0.2Mozilla Firefox 3.5.11Mozilla Firefox 3.5.12Mozilla Firefox 3.6.12
NA
CVE-2011-2981
The event-management implementation in Mozilla Firefox prior to 3.6.20, SeaMonkey 2.x, Thunderbird 3.x prior to 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote malicious users to bypass the Same Origin Policy or e...
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.10Mozilla Firefox 3.5.9Mozilla Firefox 3.0.13Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.17Mozilla Firefox 3.0.16Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.4Mozilla Firefox 1.5.1Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6
NA
CVE-2011-2984
Mozilla Firefox prior to 3.6.20, SeaMonkey 2.x, Thunderbird 3.x prior to 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote malicious users to execute arbitrary JavaScript code with chrome privileges by establishing a c...
Mozilla Firefox 3.5.7Mozilla Firefox 3.5.10Mozilla Firefox 3.0.13Mozilla Firefox 3.0.12Mozilla Firefox 3.0.5Mozilla Firefox 3.0.4Mozilla Firefox 2.0.0.19Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.1Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.0.6Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 3.5.11Mozilla Firefox 3.6.4Mozilla Firefox 3.6
NA
CVE-2011-2982
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 3.6.20, Thunderbird 2.x and 3.x prior to 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote malicious users to cause a denial of service (memory corruption and application ...
Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3Mozilla Firefox 3.5.8Mozilla Firefox 3.5Mozilla Firefox 3.0.10Mozilla Firefox 3.0.9Mozilla Firefox 3.0.2Mozilla Firefox 3.0.1Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.18Mozilla Firefox 2.0.0.6Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.17Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7
NA
CVE-2011-2983
Mozilla Firefox prior to 3.6.20, Thunderbird 2.x and 3.x prior to 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote malicious users to bypass the Same Origin Policy and read data from a different dom...
Mozilla Firefox 3.5.5Mozilla Firefox 3.5.6Mozilla Firefox 3.0.15Mozilla Firefox 3.0.14Mozilla Firefox 3.0.7Mozilla Firefox 3.0.6Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.4Mozilla Firefox 2.0.0.3Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.2Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.6Mozilla Firefox 1.5.5Mozilla Firefox 1.0.6Mozilla Firefox 1.0.8Mozilla Firefox 3.5.16
NA
CVE-2011-0084
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox prior to 3.6.20, and 4.x through 5; Thunderbird 3.x prior to 3.1.12 and other versions prior to 6; SeaMonkey 2.x prior to 2.3; and possibly other products does not properly handle SVG text, which allows remote ma...
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.5.8Mozilla Firefox 3.5Mozilla Firefox 3.0.11Mozilla Firefox 3.0.10Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0Mozilla Firefox 2.0.0.18Mozilla Firefox 1.5Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5.0.7Mozilla Firefox 1.0.2Mozilla Firefox 1.0.5Mozilla Firefox 3.5.12Mozilla Firefox 3.5.13
NA
CVE-2012-3965
Mozilla Firefox prior to 15.0 does not properly restrict navigation to the about:newtab page, which allows remote malicious users to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
Mozilla Firefox 11.0Mozilla Firefox 10.0.2Mozilla Firefox 7.0.1Mozilla Firefox 7.0Mozilla Firefox 4.0Mozilla Firefox 3.0.5Mozilla Firefox 3.6.23Mozilla Firefox 3.6.6Mozilla Firefox 3.0.17Mozilla Firefox 3.6.17Mozilla Firefox 3.0.9Mozilla Firefox 3.6.20Mozilla Firefox 3.5.10Mozilla Firefox 3.0.3Mozilla Firefox 3.5.13Mozilla Firefox 3.6.16Mozilla Firefox 3.6.14Mozilla Firefox 3.5.3Mozilla Firefox 3.5.4Mozilla Firefox 3.5.6Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook