Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 2.0.0.9 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0652
The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions prior to 3.0.9; Thunderbird prior to 2.0.0.21; and SeaMonkey prior to 1.1.15 does not include box-drawing characters, which allows remote malicious users to spoof URLs and conduct phish...
Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.1Mozilla Thunderbird 2.0.0.5Mozilla Thunderbird 2.0.0.4Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Firefox 1.0.4Mozilla Firefox 1.0.5Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.9Mozilla Firefox 2.0.0.18Mozilla ThunderbirdMozilla Firefox
NA
CVE-2009-0771
The layout engine in Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey 1.1.15 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failure...
Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.3Mozilla Firefox 2.0.0.12Mozilla Thunderbird 2.0.0.4Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.7Mozilla Thunderbird 2.0.0.6Mozilla Seamonkey 1.0.6Mozilla Firefox 1.5.0.6Mozilla Seamonkey 1.0.9Mozilla SeamonkeyMozilla Seamonkey 1.1.3Mozilla Firefox 2.0.0.2Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.3Mozilla Seamonkey 1.0Mozilla Firefox 1.5.0.11Mozilla Thunderbird 2.0.0.18Mozilla Thunderbird 2.0.0.9Mozilla Seamonkey 1.1.5Mozilla Seamonkey 1.0.7
NA
CVE-2009-0772
The layout engine in Mozilla Firefox 2 and 3 prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey 1.1.15 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, an...
Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0Mozilla Thunderbird 2.0.0.17Mozilla Thunderbird 2.0.0.0Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.5Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.6Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.0.3Mozilla Firefox 2.0.0.18Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.17
NA
CVE-2009-0773
The JavaScript engine in Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey 1.1.15 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elemen...
Mozilla Firefox 3.0Mozilla Firefox 3.0.1Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.4Mozilla Firefox 2.0.0.3Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.9Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.1Mozilla Thunderbird 2.0.0.6Mozilla Thunderbird 2.0.0.5Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0
NA
CVE-2009-0774
The layout engine in Mozilla Firefox 2 and 3 prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey 1.1.15 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CV...
Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.1Mozilla Thunderbird 2.0.0.6Mozilla Thunderbird 2.0.0.5Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.1.11Mozilla Firefox 1.0.2Mozilla Firefox 1.0.3Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.7Mozilla Firefox 1.5.0.8
NA
CVE-2009-0775
Double free vulnerability in Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey prior to 1.1.15 allows remote malicious users to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properl...
Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Thunderbird 2.0.0.14Mozilla Thunderbird 2.0.0.12Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.1.8Mozilla FirefoxMozilla Firefox 1.0Mozilla Firefox 1.0.8Mozilla Firefox 1.5Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 2.0.0.20Mozilla Thunderbird 2.0.0.18Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.15
NA
CVE-2009-0776
nsIRDFService in Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey prior to 1.1.15 allows remote malicious users to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.
Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.1Mozilla Firefox 2.0Mozilla Thunderbird 2.0.0.5Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0.0.0Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.12Mozilla Firefox 3.0.4Mozilla Firefox 1.0.4Mozilla Firefox 1.0.5Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.9Mozilla Firefox 2.0.0.18Mozilla Thunderbird
NA
CVE-2009-0777
Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey prior to 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote malicious users to spoof URLs and...
Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.2Mozilla Thunderbird 2.0.0.9Mozilla Thunderbird 2.0.0.6Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.9Mozilla Seamonkey 1.1.10Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Thunderbird 2.0.0.14Mozilla Thunderbird 2.0.0.12
NA
CVE-2009-2462
The browser engine in Mozilla Firefox prior to 3.0.12 and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a S...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 0.9.2Mozilla Firefox 1.0.1Mozilla Firefox 3.0Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 2.0 .10Mozilla Firefox 2.0 .4Mozilla Firefox 3.0.7Mozilla Firefox 2.0.0.17Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.14
NA
CVE-2009-2463
Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox prior to 3.0.12, Thunderbird prior to 2.0.0.24, and SeaMonkey prior to 1.1.19 allow remote malicious users to cause a denial of service (mem...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 1.0.1Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 2.0 .10Mozilla Firefox 2.0 .4Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 3.0.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975CVE-2024-2961CVE-2024-20380XML injectionHTML injectionCVE-2024-29204CVE-2023-51795memory leakCVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook