Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2013-1700
The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location.
CVE-2013-1699
The Internationalized Domain Name (IDN) display algorithm in Mozilla F ...
CVE-2013-1699
The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters.
CVE-2013-1698
The getUserMedia permission implementation in Mozilla Firefox before 2 ...
CVE-2013-1698
The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote attackers to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements.
CVE-2013-1697
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ...
CVE-2013-1697
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method.
CVE-2013-1696
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Opti ...
CVE-2013-1696
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
CVE-2013-1695
Mozilla Firefox before 22.0 does not properly implement certain DocShe ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2013-1700 The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location. | CVSS2: 7.2 | 0% Низкий | около 13 лет назад |
| CVE-2013-1699 The Internationalized Domain Name (IDN) display algorithm in Mozilla F ... | CVSS2: 5 | 2% Низкий | около 13 лет назад |
| CVE-2013-1699 The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters. | CVSS2: 5 | 2% Низкий | около 13 лет назад |
| CVE-2013-1698 The getUserMedia permission implementation in Mozilla Firefox before 2 ... | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
| CVE-2013-1698 The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote attackers to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements. | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
| CVE-2013-1697 The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ... | CVSS2: 9.3 | 3% Низкий | около 13 лет назад |
| CVE-2013-1697 The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method. | CVSS2: 9.3 | 3% Низкий | около 13 лет назад |
| CVE-2013-1696 Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Opti ... | CVSS2: 4 | 2% Низкий | около 13 лет назад |
| CVE-2013-1696 Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses. | CVSS2: 4 | 2% Низкий | около 13 лет назад |
| CVE-2013-1695 Mozilla Firefox before 22.0 does not properly implement certain DocShe ... | CVSS2: 5 | 3% Низкий | около 13 лет назад |
Уязвимостей на страницу