Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 1.5.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-5013
Mozilla Firefox 2.x prior to 2.0.0.18 and SeaMonkey 1.x prior to 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote malicious users to execute arbitrary code via a crafted SWF file that "dynamically unloads itself f...
Mozilla Firefox 0.9.2Mozilla Firefox 1.0.1Mozilla Firefox 1.0.7Mozilla Firefox 1.0.6Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.3Mozilla Firefox 2.0.0.12Mozilla Firefox 0.10Mozilla Firefox 1.0Mozilla Firefox 0.9Mozilla Firefox 1.5Mozilla Firefox 1.0.8Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 1.8Mozilla Firefox 1.5.8Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.9
NA
CVE-2009-2466
The JavaScript engine in Mozilla Firefox prior to 3.0.12 and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLooku...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 1.0.1Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 3.0.7Mozilla Firefox 2.0.0.17Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5Mozilla Firefox 3.0.4Mozilla Thunderbird 2.0.0.3Mozilla Firefox 2.0.0.14Mozilla Firefox 0.9.1
NA
CVE-2008-7293
Mozilla Firefox prior to 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle malicious users to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Tran...
Mozilla Firefox 3.5.6Mozilla Firefox 3.5.10Mozilla Firefox 3.0.16Mozilla Firefox 3.0.14Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.4Mozilla Firefox 2.0.0.2Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.1Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.6Mozilla Firefox 1.0.1Mozilla Firefox 1.0.6Mozilla Firefox 1.0
NA
CVE-2011-2370
Mozilla Firefox prior to 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote malicious users to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.10Mozilla Firefox 3.5.9Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3Mozilla Firefox 3.5.8Mozilla Firefox 3.5Mozilla Firefox 3.0.10Mozilla Firefox 3.0.9Mozilla Firefox 3.0.2Mozilla Firefox 3.0.1Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.18Mozilla Firefox 2.0.0.6Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 1.5.8Mozilla Firefox 1.0.2
NA
CVE-2009-1834
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox prior to 3.0.11 and SeaMonkey prior to 1.1.17 allows remote malicious users to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrate...
Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.5Mozilla Firefox 0.10.1Mozilla Firefox 0.2Mozilla Firefox 2.0.0.12Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.0Mozilla Firefox 3.0.9Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.99Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.9Mozilla Firefox 2.0.0.19Mozilla Firefox 1.0.1Mozilla Firefox 1.0
NA
CVE-2009-1835
Mozilla Firefox prior to 3.0.11 and SeaMonkey prior to 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote malicious users to read arbitrary cookies via a crafted HTML document, as demonstrate...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.9Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.5Mozilla Firefox 0.10Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.10Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.7
NA
CVE-2009-2462
The browser engine in Mozilla Firefox prior to 3.0.12 and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a S...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 0.9.2Mozilla Firefox 1.0.1Mozilla Firefox 3.0Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 2.0 .10Mozilla Firefox 2.0 .4Mozilla Firefox 3.0.7Mozilla Firefox 2.0.0.17Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.3Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.14
NA
CVE-2009-2463
Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox prior to 3.0.12, Thunderbird prior to 2.0.0.24, and SeaMonkey prior to 1.1.19 allow remote malicious users to cause a denial of service (mem...
Mozilla Firefox 2.0.0.19Mozilla Firefox 0.10Mozilla Firefox 1.0.1Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 2.0 .10Mozilla Firefox 2.0 .4Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 0.7.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 1.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 3.0.3
NA
CVE-2012-3973
The debugger in the developer-tools subsystem in Mozilla Firefox prior to 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote malicious users to execute arbitrary code by leveraging the presence of the HT...
Mozilla Firefox 12.0Mozilla Firefox 8.0Mozilla Firefox 8.0.1Mozilla Firefox 5.0Mozilla Firefox 13.0Mozilla FirefoxMozilla Firefox 9.0.1Mozilla Firefox 9.0Mozilla Firefox 6.0Mozilla Firefox 5.0.1Mozilla Firefox 4.0Mozilla Firefox 3.0.1Mozilla Firefox 3.6.25Mozilla Firefox 3.5.7Mozilla Firefox 3.6.19Mozilla Firefox 3.0.7Mozilla Firefox 3.5.8Mozilla Firefox 3.0.15Mozilla Firefox 3.0.2Mozilla Firefox 3.6.22Mozilla Firefox 3.6.2Mozilla Firefox 3.0.11
NA
CVE-2012-3965
Mozilla Firefox prior to 15.0 does not properly restrict navigation to the about:newtab page, which allows remote malicious users to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
Mozilla Firefox 11.0Mozilla Firefox 10.0.2Mozilla Firefox 7.0.1Mozilla Firefox 7.0Mozilla Firefox 4.0Mozilla Firefox 3.0.5Mozilla Firefox 3.6.23Mozilla Firefox 3.6.6Mozilla Firefox 3.0.17Mozilla Firefox 3.6.17Mozilla Firefox 3.0.9Mozilla Firefox 3.6.20Mozilla Firefox 3.5.10Mozilla Firefox 3.0.3Mozilla Firefox 3.5.13Mozilla Firefox 3.6.16Mozilla Firefox 3.6.14Mozilla Firefox 3.5.3Mozilla Firefox 3.5.4Mozilla Firefox 3.5.6Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook