Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2015-7212
Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.
CVE-2015-7211
Mozilla Firefox before 43.0 mishandles the # (number sign) character i ...
CVE-2015-7211
Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.
CVE-2015-7210
Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefo ...
CVE-2015-7210
Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function.
CVE-2015-7208
Mozilla Firefox before 43.0 stores cookies containing vertical tab cha ...
CVE-2015-7208
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.
CVE-2015-7207
Mozilla Firefox before 43.0 does not properly restrict the availabilit ...
CVE-2015-7207
Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.
CVE-2015-7205
Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2015-7212 Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation. | CVSS2: 7.5 | 4% Низкий | больше 10 лет назад |
| CVE-2015-7211 Mozilla Firefox before 43.0 mishandles the # (number sign) character i ... | CVSS2: 5 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7211 Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors. | CVSS2: 5 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7210 Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefo ... | CVSS2: 7.5 | 4% Низкий | больше 10 лет назад |
| CVE-2015-7210 Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function. | CVSS2: 7.5 | 4% Низкий | больше 10 лет назад |
| CVE-2015-7208 Mozilla Firefox before 43.0 stores cookies containing vertical tab cha ... | CVSS2: 5 | 2% Низкий | больше 10 лет назад |
| CVE-2015-7208 Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers. | CVSS2: 5 | 2% Низкий | больше 10 лет назад |
| CVE-2015-7207 Mozilla Firefox before 43.0 does not properly restrict the availabilit ... | CVSS2: 5 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7207 Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300. | CVSS2: 5 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7205 Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in ... | CVSS2: 10 | 3% Низкий | больше 10 лет назад |
Уязвимостей на страницу