Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pavel cvrcek vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-1832
Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame constructi...
Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0Mozilla Firefox 3.0.9Mozilla Thunderbird 2.0.0.15Mozilla Thunderbird 2.0.0.16Mozilla Thunderbird 2.0.0.6Mozilla Thunderbird 2.0.0.7Mozilla Thunderbird 2.0 .5Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 1.0.1Mozilla Thunderbird 1.0.3Mozilla Thunderbird 1.0.8Mozilla Thunderbird 1.5.0.12Mozilla Thunderbird 1.5.0.5Mozilla Thunderbird 1.5.0.9Mozilla Thunderbird 1.5.0.7Mozilla Thunderbird 1.5.0.2Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.8
NA
CVE-2009-1834
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox prior to 3.0.11 and SeaMonkey prior to 1.1.17 allows remote malicious users to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrate...
Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.5Mozilla Firefox 0.10.1Mozilla Firefox 0.2Mozilla Firefox 2.0.0.12Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.0Mozilla Firefox 3.0.9Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.99Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.9Mozilla Firefox 2.0.0.19Mozilla Firefox 1.0.1Mozilla Firefox 1.0
NA
CVE-2009-1835
Mozilla Firefox prior to 3.0.11 and SeaMonkey prior to 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote malicious users to read arbitrary cookies via a crafted HTML document, as demonstrate...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.9Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.5Mozilla Firefox 0.10Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.10Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.7
NA
CVE-2009-1839
Mozilla Firefox 3 prior to 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote malicious users to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-...
Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5Mozilla Firefox 3.0.2Mozilla FirefoxMozilla Firefox 3.0.1Mozilla Firefox 3.0Mozilla Firefox 3.0.6Mozilla Firefox 3.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.1Mozilla Firefox 3.0beta5
NA
CVE-2009-1840
Mozilla Firefox prior to 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote malicious users to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug&quo...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.7Mozilla Firefox 3.0.2Mozilla FirefoxMozilla Firefox 3.0.1Mozilla Firefox 3.0Mozilla Firefox 3.0beta5Mozilla Firefox 3.0.6Mozilla Firefox 3.0.4Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.1Mozilla Firefox 3.0.5Mozilla ThunderbirdMozilla Seamonkey
7.5
CVSSv3
CVE-2009-1837
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 prior to 3.0.11 might allow remote malicious users to execute arbitrary code via a page transition during Java applet loading, related to a use-afte...
Mozilla FirefoxDebian Debian Linux 5.0Fedoraproject Fedora 10Fedoraproject Fedora 9Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux 4.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Server Aus 5.3Redhat Enterprise Linux Eus 5.3Redhat Enterprise Linux Eus 4.8
NA
CVE-2009-1833
The JavaScript engine in Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1...
Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.13Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0 .13Mozilla Thunderbird 2.0 .14Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.7.3Mozilla Thunderbird 1.0Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.0.6Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 1.5.0.3Mozilla Thunderbird 1.5.0.4Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.12
NA
CVE-2009-1836
Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle malicious users to execute arbi...
Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Thunderbird 2.0.0.11Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 2.0 .13Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.7.3Mozilla Thunderbird 1.0Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 1.5.0.3Mozilla Thunderbird 1.5.0.4Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13
NA
CVE-2009-1841
js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allows remote malicious users to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.9Mozilla Thunderbird 2.0.0.0Mozilla Thunderbird 2.0.0.17Mozilla Thunderbird 2.0.0.18Mozilla Thunderbird 2.0.0.8Mozilla Thunderbird 2.0.0.9Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 2.0 .9Mozilla Thunderbird 2.0 8Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.8Mozilla Thunderbird 1.0.4Mozilla Thunderbird 1.5Mozilla Thunderbird 1.5.0.1Mozilla Thunderbird 1.5.0.8Mozilla Thunderbird 1.5.2Mozilla Thunderbird 1.7.1Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.10
NA
CVE-2009-1392
The browser engine in Mozilla Firefox 3 prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1)...
Mozilla Firefox 3.0.5Mozilla Firefox 3.0.6Mozilla Thunderbird 2.0.0.11Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.2Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.9Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.5.0.13Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.1Mozilla Thunderbird 1.5.0.3Mozilla Thunderbird 1.7.3Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-33545CVE-2024-35725CVE-2024-32704overflowfile uploadCVE-2024-0230CVE-2024-32705CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook