Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 3.6.10 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-3973
The debugger in the developer-tools subsystem in Mozilla Firefox prior to 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote malicious users to execute arbitrary code by leveraging the presence of the HT...
Mozilla Firefox 12.0Mozilla Firefox 8.0Mozilla Firefox 8.0.1Mozilla Firefox 5.0Mozilla Firefox 13.0Mozilla FirefoxMozilla Firefox 9.0.1Mozilla Firefox 9.0Mozilla Firefox 6.0Mozilla Firefox 5.0.1Mozilla Firefox 4.0Mozilla Firefox 3.0.1Mozilla Firefox 3.6.25Mozilla Firefox 3.5.7Mozilla Firefox 3.6.19Mozilla Firefox 3.0.7Mozilla Firefox 3.5.8Mozilla Firefox 3.0.15Mozilla Firefox 3.0.2Mozilla Firefox 3.6.22Mozilla Firefox 3.6.2Mozilla Firefox 3.0.11
NA
CVE-2012-3965
Mozilla Firefox prior to 15.0 does not properly restrict navigation to the about:newtab page, which allows remote malicious users to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
Mozilla Firefox 11.0Mozilla Firefox 10.0.2Mozilla Firefox 7.0.1Mozilla Firefox 7.0Mozilla Firefox 4.0Mozilla Firefox 3.0.5Mozilla Firefox 3.6.23Mozilla Firefox 3.6.6Mozilla Firefox 3.0.17Mozilla Firefox 3.6.17Mozilla Firefox 3.0.9Mozilla Firefox 3.6.20Mozilla Firefox 3.5.10Mozilla Firefox 3.0.3Mozilla Firefox 3.5.13Mozilla Firefox 3.6.16Mozilla Firefox 3.6.14Mozilla Firefox 3.5.3Mozilla Firefox 3.5.4Mozilla Firefox 3.5.6Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10
NA
CVE-2012-5837
The Web Developer Toolbar in Mozilla Firefox prior to 17.0 executes script with chrome privileges, which allows user-assisted remote malicious users to conduct cross-site scripting (XSS) attacks via a crafted string.
Mozilla Firefox 14.0.1Mozilla Firefox 14.0Mozilla Firefox 10.0.1Mozilla Firefox 9.0.1Mozilla FirefoxMozilla Firefox 13.0Mozilla Firefox 13.0.1Mozilla Firefox 12.0Mozilla Firefox 9.0Mozilla Firefox 8.0.1Mozilla Firefox 5.0Mozilla Firefox 5.0.1Mozilla Firefox 4.0Mozilla Firefox 3.6.4Mozilla Firefox 3.5.10Mozilla Firefox 3.6.25Mozilla Firefox 3.6.24Mozilla Firefox 3.6.23Mozilla Firefox 3.5.1Mozilla Firefox 3.5.7Mozilla Firefox 3.6.19Mozilla Firefox 3.6.7
NA
CVE-2012-4203
The New Tab page in Mozilla Firefox prior to 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote malicious users to run arbitrary programs by leveraging a javascript: URL in a bookmark.
Mozilla FirefoxMozilla Firefox 16.0.1Mozilla Firefox 13.0.1Mozilla Firefox 12.0Mozilla Firefox 9.0Mozilla Firefox 8.0.1Mozilla Firefox 5.0Mozilla Firefox 5.0.1Mozilla Firefox 4.0Mozilla Firefox 3.6.4Mozilla Firefox 3.5.10Mozilla Firefox 3.6.24Mozilla Firefox 3.6.3Mozilla Firefox 3.6.23Mozilla Firefox 3.5.1Mozilla Firefox 3.5.7Mozilla Firefox 3.6.19Mozilla Firefox 3.6.16Mozilla Firefox 3.6.14Mozilla Firefox 3.0.10Mozilla Firefox 3.5.2Mozilla Firefox 3.5.9
NA
CVE-2012-4190
The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox prior to 16.0.1 on CyanogenMod 10, allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via u...
Mozilla Firefox 14.0.1Mozilla Firefox 13.0Mozilla Firefox 10.0.1Mozilla Firefox 9.0.1Mozilla Firefox 6.0.1Mozilla Firefox 5.0Mozilla Firefox 4.0Mozilla Firefox 3.0.14Mozilla Firefox 3.6.4Mozilla Firefox 3.6.2Mozilla Firefox 3.6.25Mozilla Firefox 3.5.13Mozilla Firefox 3.0.5Mozilla Firefox 3.6.13Mozilla Firefox 3.5.7Mozilla Firefox 3.6.15Mozilla Firefox 3.6.7Mozilla Firefox 3.5.15Mozilla Firefox 3.0.6Mozilla Firefox 3.5.3Mozilla Firefox 3.5.9Mozilla Firefox 2.0.0.14
NA
CVE-2011-2980
Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox prior to 3.6.20, Thunderbird 3.x prior to 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded...
Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6Mozilla Firefox 1.0.7Mozilla Firefox 1.0.6Mozilla Firefox 3.5.15
NA
CVE-2012-3987
Mozilla Firefox prior to 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote malicious users to bypass intended access restrictions via a crafted web site.
Mozilla Firefox 14.0Mozilla Firefox 13.0Mozilla Firefox 9.0.1Mozilla Firefox 9.0Mozilla Firefox 6.0Mozilla Firefox 5.0.1Mozilla Firefox 4.0Mozilla Firefox 3.0.1Mozilla Firefox 3.6.25Mozilla Firefox 3.5.7Mozilla Firefox 3.6.19Mozilla Firefox 3.6.12Mozilla Firefox 3.0.7Mozilla Firefox 3.5.8Mozilla Firefox 3.0.15Mozilla Firefox 3.0.2Mozilla Firefox 3.6.22Mozilla Firefox 3.6.2Mozilla Firefox 3.6.11Mozilla Firefox 3.0.11Mozilla Firefox 3.6.9Mozilla Firefox 3.0.10
NA
CVE-2013-0790
Unspecified vulnerability in the browser engine in Mozilla Firefox prior to 20.0 on Android allows remote malicious users to cause a denial of service (stack memory corruption and application crash) or possibly execute arbitrary code via unknown vectors involving a plug-in.
Mozilla Firefox 18.0Mozilla Firefox 18.0.1Mozilla Firefox 15.0.1Mozilla Firefox 14.0.1Mozilla Firefox 10.0.2Mozilla Firefox 10.0Mozilla Firefox 7.0Mozilla Firefox 6.0Mozilla Firefox 6.0.2Mozilla Firefox 4.0Mozilla Firefox 3.6.21Mozilla Firefox 18.0.2Mozilla Firefox 17.0.1Mozilla Firefox 17.0Mozilla Firefox 14.0Mozilla Firefox 13.0Mozilla Firefox 10.0.1Mozilla Firefox 9.0.1Mozilla Firefox 6.0.1Mozilla Firefox 5.0Mozilla Firefox 3.0.14Mozilla Firefox 3.6.2
NA
CVE-2012-4206
Untrusted search path vulnerability in the installer in Mozilla Firefox prior to 17.0 and Firefox ESR 10.x prior to 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
Mozilla Firefox 16.0Mozilla Firefox 16.0.1Mozilla Firefox 15.0Mozilla Firefox 12.0Mozilla Firefox 11.0Mozilla Firefox 8.0Mozilla Firefox 7.0.1Mozilla Firefox 4.0Mozilla Firefox 3.0.13Mozilla Firefox 3.0.1Mozilla Firefox 3.6.20Mozilla Firefox 3.6Mozilla Firefox 3.6.11Mozilla Firefox 3.5.14Mozilla Firefox 3.6.10Mozilla Firefox 3.6.9Mozilla Firefox 3.6.15Mozilla Firefox 3.6.7Mozilla Firefox 3.0.6Mozilla Firefox 3.5.2Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5
NA
CVE-2010-3177
Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox prior to 3.5.14 and 3.6.x prior to 3.6.11, and SeaMonkey prior to 2.0.9, allow remote malicious users to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directo...
Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.9Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.18Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.1.8Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.1.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook