Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 501
CVE-2010-3771
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey b ...
CVE-2010-3770
Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.
CVE-2010-3770
Multiple cross-site scripting (XSS) vulnerabilities in the rendering e ...
CVE-2010-3769
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
CVE-2010-3769
The line-breaking implementation in Mozilla Firefox before 3.5.16 and ...
CVE-2010-3768
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules.
CVE-2010-3768
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird bef ...
CVE-2010-3767
Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via a JavaScript array with many elements.
CVE-2010-3767
Integer overflow in the NewIdArray function in Mozilla Firefox before ...
CVE-2010-3766
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2010-3771 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey b ... | CVSS2: 6.8 | 2% Низкий | около 15 лет назад |
 | CVE-2010-3770 Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering. | CVSS2: 4.3 | 9% Низкий | около 15 лет назад |
| CVE-2010-3770 Multiple cross-site scripting (XSS) vulnerabilities in the rendering e ... | CVSS2: 4.3 | 9% Низкий | около 15 лет назад |
| CVE-2010-3769 The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read. | CVSS2: 9.3 | 7% Низкий | около 15 лет назад |
| CVE-2010-3769 The line-breaking implementation in Mozilla Firefox before 3.5.16 and ... | CVSS2: 9.3 | 7% Низкий | около 15 лет назад |
| CVE-2010-3768 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules. | CVSS2: 9.3 | 7% Низкий | около 15 лет назад |
| CVE-2010-3768 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird bef ... | CVSS2: 9.3 | 7% Низкий | около 15 лет назад |
| CVE-2010-3767 Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via a JavaScript array with many elements. | CVSS2: 9.3 | 5% Низкий | около 15 лет назад |
| CVE-2010-3767 Integer overflow in the NewIdArray function in Mozilla Firefox before ... | CVSS2: 9.3 | 5% Низкий | около 15 лет назад |
| CVE-2010-3766 Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node. | CVSS2: 9.3 | 7% Низкий | около 15 лет назад |
Уязвимостей на страницу