Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox preview release vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0904
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 allow remote malicious users to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Mozilla Firefox 0.8Mozilla Firefox 0.9Mozilla Mozilla 1.7.2Mozilla Mozilla 1.7Netscape Navigator 7.0.2Netscape Navigator 7.1Mozilla Mozilla 1.7.1Mozilla Thunderbird 0.7.3Netscape Navigator 7.0Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Netscape Navigator 7.2Conectiva Linux 10.0Mozilla Firefox 0.9.3Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Conectiva Linux 9.0Redhat Enterprise Linux 2.1Redhat Linux 7.3Redhat Enterprise Linux Desktop 3.0
NA
CVE-2004-0905
Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 allows remote malicious users to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in anoth...
Mozilla Firefox 0.9Mozilla Firefox 0.9.1Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Conectiva Linux 10.0Conectiva Linux 9.0Mozilla Firefox 0.8Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 1.5Netscape Navigator 7.1Netscape Navigator 7.2Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Mozilla 1.4.1Mozilla Mozilla 1.7.1Mozilla Mozilla 1.7.2
NA
CVE-2004-0908
Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 1.7Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.4.1Mozilla Mozilla 1.6Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.7.2Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.9
NA
CVE-2004-0907
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2.1Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.3.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Thunderbird 0.1Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Mozilla 0.8Mozilla Mozilla 0.9.5
NA
CVE-2004-0906
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary c...
Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Thunderbird 0.5
NA
CVE-2004-0909
Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 may allow remote malicious users to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enableP...
Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 1.7Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.5Mozilla Mozilla 0.9.6Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1
NA
CVE-2004-0903
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 allows remote malicious users to execute arbitrary code via malformed VCard attachments that are not prope...
Mozilla Mozilla 1.7.2Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Conectiva Linux 9.0Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Conectiva Linux 10.0Redhat Enterprise Linux 2.1Redhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 1.0Suse Suse Linux 1.0Suse Suse Linux 8.1Redhat Enterprise Linux 3.0Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.0Suse Suse Linux 9.1Redhat Linux 7.3Suse Suse Linux 8.2Suse Suse Linux 8Redhat Linux 9.0
NA
CVE-2004-0902
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 allow remote malicious users to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" funct...
Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Conectiva Linux 10.0Conectiva Linux 9.0Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Mozilla Mozilla 1.7.2Redhat Enterprise Linux 2.1Redhat Linux 7.3Suse Suse Linux 8Suse Suse Linux 9.0Redhat Enterprise Linux 3.0Redhat Linux 9.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 1.0Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 1.0Suse Suse Linux 9.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook