Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 3.6.8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-0826
The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox prior to 36.0 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a...
Mozilla Firefox 34.0.5Mozilla Firefox 33.0Mozilla Firefox 3.6.7Mozilla Firefox 3.6.6Mozilla Firefox 3.6.23Mozilla Firefox 3.6.22Mozilla Firefox 3.6.16Mozilla Firefox 3.6.15Mozilla Firefox 3.5.9Mozilla Firefox 3.5.8Mozilla Firefox 3.5.18Mozilla Firefox 3.5.17Mozilla Firefox 3.5.10Mozilla Firefox 3.5.1Mozilla FirefoxMozilla Firefox 3.6.9Mozilla Firefox 3.6.8Mozilla Firefox 3.6.26Mozilla Firefox 3.6.25Mozilla Firefox 3.6.24Mozilla Firefox 3.6.18Mozilla Firefox 3.6.17
NA
CVE-2015-0828
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox prior to 36.0, when a nonstandard memory allocator is used, allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScr...
Oracle Solaris 11.3Mozilla Firefox 32.0Mozilla Firefox 31.1.0Mozilla Firefox 3.6.4Mozilla Firefox 3.6.3Mozilla Firefox 3.6.21Mozilla Firefox 3.6.20Mozilla Firefox 3.6.14Mozilla Firefox 3.6.13Mozilla Firefox 3.5.7Mozilla Firefox 3.5.6Mozilla Firefox 3.5.5Mozilla Firefox 3.5.16Mozilla Firefox 3.5.15Mozilla Firefox 3.5Mozilla Firefox 3.0.9Mozilla Firefox 31.0Mozilla Firefox 30.0Mozilla Firefox 3.6.28Mozilla Firefox 3.6.27Mozilla Firefox 3.6.26Mozilla Firefox 3.6.2
NA
CVE-2015-0830
The WebGL implementation in Mozilla Firefox prior to 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote malicious users to cause a denial of service (application crash) via crafted WebGL content.
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Mozilla FirefoxMozilla Firefox 34.0.5Mozilla Firefox 3.6.8Mozilla Firefox 3.6.7Mozilla Firefox 3.6.24Mozilla Firefox 3.6.23Mozilla Firefox 3.6.17Mozilla Firefox 3.6.16Mozilla Firefox 3.6Mozilla Firefox 3.5.9Mozilla Firefox 3.5.19Mozilla Firefox 3.5.18Mozilla Firefox 3.5.11Mozilla Firefox 3.5.10Mozilla Firefox 3.0.5Mozilla Firefox 3.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.14Mozilla Firefox 3.0.13
NA
CVE-2015-0832
Mozilla Firefox prior to 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle malicious users to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and ...
Opensuse Opensuse 13.2Opensuse Opensuse 13.1Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Mozilla Firefox 30.0Mozilla Firefox 3.6.9Mozilla Firefox 3.6.27Mozilla Firefox 3.6.26Mozilla Firefox 3.6.2Mozilla Firefox 3.6.19Mozilla Firefox 3.6.11Mozilla Firefox 3.6.10Mozilla Firefox 3.5.4Mozilla Firefox 3.5.3Mozilla Firefox 3.5.14Mozilla Firefox 3.5.13Mozilla Firefox 3.0.7Mozilla Firefox 3.0.6Mozilla Firefox 3.0.17Mozilla Firefox 3.0.16Mozilla Firefox 3.0.1
NA
CVE-2015-0834
The WebRTC subsystem in Mozilla Firefox prior to 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle malicious users to discover credentials by spoofing a server and completing a brute-force at...
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Opensuse Opensuse 13.2Opensuse Opensuse 13.1Mozilla FirefoxMozilla Firefox 34.0.5Mozilla Firefox 3.6.8Mozilla Firefox 3.6.7Mozilla Firefox 3.6.25Mozilla Firefox 3.6.24Mozilla Firefox 3.6.17Mozilla Firefox 3.6.16Mozilla Firefox 3.6Mozilla Firefox 3.5.9Mozilla Firefox 3.5.2Mozilla Firefox 3.5.19Mozilla Firefox 3.5.11Mozilla Firefox 3.5.10Mozilla Firefox 3.0.5Mozilla Firefox 3.0.4Mozilla Firefox 3.0.15
NA
CVE-2015-0835
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 36.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox 33.0Mozilla Firefox 32.0Mozilla Firefox 3.6.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.23Mozilla Firefox 3.6.22Mozilla Firefox 3.6.15Mozilla Firefox 3.6.14Mozilla Firefox 3.5.8Mozilla Firefox 3.5.7Mozilla Firefox 3.5.18Mozilla Firefox 3.5.17Mozilla Firefox 3.5.16Mozilla Firefox 3.5.1Mozilla Firefox 3.5Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 3.0.13Mozilla Firefox 3.0.12Mozilla Firefox 3.0.11Mozilla Firefox 27.0.1Mozilla Firefox 27.0
NA
CVE-2012-4210
The Style Inspector in Mozilla Firefox prior to 17.0 and Firefox ESR 10.x prior to 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote malicious users to execute arbitrary JavaScript cod...
Mozilla Firefox 16.0.1Mozilla Firefox 16.0Mozilla Firefox 12.0Mozilla Firefox 11.0Mozilla Firefox 8.0Mozilla Firefox 7.0.1Mozilla Firefox 4.0Mozilla Firefox 3.6.20Mozilla Firefox 3.0.1Mozilla Firefox 3.6.11Mozilla Firefox 3.5.14Mozilla Firefox 3.0Mozilla Firefox 3.0.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.8Mozilla Firefox 3.5.11Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Firefox 3.6.17Mozilla Firefox 3.5.5Mozilla Firefox 3.0.15Mozilla Firefox 2.0.0.8
NA
CVE-2011-0051
Mozilla Firefox prior to 3.5.17 and 3.6.x prior to 3.6.14, and SeaMonkey prior to 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote malicious users to force a user to respond positively to a dialog question, as demonstrated by a quest...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.9Mozilla Firefox 3.6.11Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.1.8
NA
CVE-2011-0054
Buffer overflow in the JavaScript engine in Mozilla Firefox prior to 3.5.17 and 3.6.x prior to 3.6.14, and SeaMonkey prior to 2.0.12, might allow remote malicious users to execute arbitrary code via vectors involving non-local JavaScript variables, aka an "upvarMap" iss...
Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.2Mozilla Firefox 3.6.9Mozilla Firefox 3.6.11Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.1.7Mozilla Seamonkey 2.0
NA
CVE-2011-0055
Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox prior to 3.5.17 and 3.6.x prior to 3.6.14, and SeaMonkey prior to 2.0.12, might allow remote malicious users to execute arbitrary code via unspecified vectors related to the js_HasOwnProper...
Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.9Mozilla Firefox 3.6.11Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.14Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.5Mozilla Seamonkey 1.5.0.10Mozilla Seamonkey 1.5.0.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook