Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox esr 31.3.0 vulnerabilities and exploits

(subscribe to this query)

7.5
CVSSv2
CVE-2014-8641
Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data....
Mozilla SeamonkeyMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3.0Mozilla Firefox
7.5
CVSSv2
CVE-2014-8634
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly...
Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3.0Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
6.8
CVSSv2
CVE-2014-8638
The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct...
Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3.0Mozilla ThunderbirdMozilla FirefoxMozilla Seamonkey
6.8
CVSSv2
CVE-2014-8639
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to...
Mozilla SeamonkeyMozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3.0Mozilla Thunderbird
6.8
CVSSv2
CVE-2015-0817
The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to...
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Seamonkey
7.5
CVSSv2
CVE-2015-0801
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818....
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox EsrMozilla Thunderbird
7.5
CVSSv2
CVE-2015-0818
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation....
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Seamonkey
6.8
CVSSv2
CVE-2015-0807
The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS...
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Thunderbird
5
CVSSv2
CVE-2015-2729
The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from...
Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0Mozilla ThunderbirdMozilla FirefoxOracle Solaris 11.3
10
CVSSv2
CVE-2015-2731
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript...
Mozilla FirefoxMozilla ThunderbirdOracle Solaris 11.3Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
wirelesstoodeequinn projecttype confusionCVE-2021-26857scratchpadCVE-2020-29020man-in-the-middleibmCVE-2021-26971CVE-2021-28032CVE-2021-21725CVE-2021-26855