Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla mozilla 1.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2003-0594
Mozilla allows remote malicious users to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerabl...
Mozilla Mozilla 1.1Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.4.2Mozilla Mozilla 1.0Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.0.1Mozilla Mozilla 1.2Mozilla Mozilla 1.2.1Mozilla Mozilla 1.0.2
NA
CVE-2004-1614
Mozilla allows remote malicious users to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme.
Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Mozilla 1.3Mozilla Mozilla 1.5Mozilla Mozilla 1.6Mozilla Mozilla 1.1Mozilla Mozilla 1.4.1Mozilla Mozilla 1.4.2Mozilla Mozilla 1.7.2Mozilla Mozilla 1.7.3Mozilla Mozilla 1.0.1Mozilla Mozilla 1.2.1Mozilla Mozilla 1.4Mozilla Mozilla 1.7Mozilla Mozilla 1.8Mozilla Mozilla 1.3.1Mozilla Mozilla 1.7.1
NA
CVE-2004-0191
Mozilla prior to 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.6Mozilla Mozilla 0.9.7Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.3.1Mozilla Mozilla 1.4Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.4.1Mozilla Mozilla 1.0.1Mozilla Mozilla 1.2.1Mozilla Mozilla 1.2Mozilla Mozilla 1.5Mozilla Mozilla 0.8Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.5Mozilla Mozilla 1.0.2Mozilla Mozilla 1.3Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.8
NA
CVE-2004-1451
Mozilla prior to 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote malicious users to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.
Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.5Mozilla Mozilla 0.9.6Mozilla Mozilla 0.9.7Mozilla Mozilla 1.2Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.4Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.9Mozilla Mozilla 1.0.1Mozilla Mozilla 1.4.1Mozilla Mozilla 1.4.4Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1Mozilla Mozilla 0.9.35
NA
CVE-2004-1449
Mozilla prior to 1.7, Firefox prior to 0.9, and Thunderbird prior to 0.7 allows remote malicious users to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.
Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 1.1Mozilla Mozilla 1.2Mozilla Mozilla 1.2.1Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Mozilla 0.8Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.6Mozilla Mozilla 1.0Mozilla Mozilla 1.3Mozilla Mozilla 1.4Mozilla Mozilla 1.5.1Mozilla Thunderbird 0.6Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 0.9.9
NA
CVE-2004-1156
Mozilla prior to 1.7.6, and Firefox prior to 1.0.1, allows remote malicious users to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web s...
Mozilla Firefox 0.10.1Mozilla Firefox 0.8Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.6Mozilla Mozilla 0.9.7Mozilla Firefox 0.10Mozilla Firefox 0.9Mozilla Firefox 1.0Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.5Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1Mozilla Mozilla 1.7Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.4.1Mozilla Mozilla 1.0.1
NA
CVE-2004-1613
Mozilla allows remote malicious users to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstr...
Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.5Mozilla Mozilla 1.6Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2Mozilla Mozilla 1.8Sgi Propack 3.0Mozilla Mozilla 1.2.1Mozilla Mozilla 1.4.2Mozilla Mozilla 1.4.4Mozilla Mozilla 1.7.2Mozilla Mozilla 1.7.3Redhat Enterprise Linux 2.1Redhat Linux 7.3
NA
CVE-2004-0906
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary c...
Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Thunderbird 0.5
NA
CVE-2004-0907
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2.1Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.3.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Thunderbird 0.1Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Mozilla 0.8Mozilla Mozilla 0.9.5
NA
CVE-2004-0909
Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 may allow remote malicious users to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enableP...
Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 1.7Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.5Mozilla Mozilla 0.9.6Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook