Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla firefox 2.0 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2008-2806

Mozilla Firefox prior to 2.0.0.15 and SeaMonkey prior to 1.1.10 on Mac OS X allow remote malicious users to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.
Mozilla Firefox 2.0Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0 .1Mozilla Firefox 2.0 .4Mozilla Firefox 2.0 .5Mozilla Firefox 2.0 .6Mozilla Firefox 2.0 .7
NA

CVE-2008-2808

Mozilla Firefox prior to 2.0.0.15 and SeaMonkey prior to 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote malicious users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.
Mozilla Firefox 2.0Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.12Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0 .1Mozilla Firefox 2.0 .4Mozilla Firefox 2.0 .5Mozilla Firefox 2.0 .6Mozilla Firefox 2.0 .9
NA

CVE-2008-2933

Mozilla Firefox prior to 2.0.0.16, and 3.x prior to 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote malicious users to access chrome:i URIs, or read arbitrary local files via manipulations involving a ...
Mozilla FirefoxMozilla Firefox 0.8Mozilla Firefox 0.9Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Firefox 0.10Mozilla Firefox 0.10.1Mozilla Firefox 1.0Mozilla Firefox 1.0.1Mozilla Firefox 1.0.2Mozilla Firefox 1.0.3
NA

CVE-2009-0355

components/sessionstore/src/nsSessionStore.js in Mozilla Firefox prior to 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote malicious users to read arbitrary files on a client machine via a crafted IN...
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
NA

CVE-2009-0356

Mozilla Firefox prior to 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote malicious users to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors...
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
NA

CVE-2009-0821

Mozilla Firefox 2.0.0.20 and previous versions allows remote malicious users to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element.
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
NA

CVE-2009-2654

Mozilla Firefox prior to 3.0.13, and 3.5.x prior to 3.5.2, allows remote malicious users to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resultin...
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
NA

CVE-2009-3077

Mozilla Firefox prior to 3.0.14, and 3.5.x prior to 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote malicious users to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vul...
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
NA

CVE-2009-3078

Visual truncation vulnerability in Mozilla Firefox prior to 3.0.14, and 3.5.x prior to 3.5.3, allows remote malicious users to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
NA

CVE-2009-3079

Unspecified vulnerability in Mozilla Firefox prior to 3.0.14, and 3.5.x prior to 3.5.3, allows remote malicious users to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.
Mozilla FirefoxMozilla Firefox 0.1Mozilla Firefox 0.2Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.5Mozilla Firefox 0.6Mozilla Firefox 0.6.1Mozilla Firefox 0.7Mozilla Firefox 0.7.1Mozilla Firefox 0.8Mozilla Firefox 0.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2024-42327CVE-2024-53691cameraCVE-2024-53810CVE-2024-41649logic flawCVE-2024-38921CVE-2024-41713
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook