Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2013-1688
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site.
CVE-2013-1687
The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implemen ...
CVE-2013-1687
The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site.
CVE-2013-1686
Use-after-free vulnerability in the mozilla::ResetDir function in Mozi ...
CVE-2013-1686
Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVE-2013-1685
Use-after-free vulnerability in the nsIDocument::GetRootElement functi ...
CVE-2013-1685
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
CVE-2013-1684
Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::Lo ...
CVE-2013-1684
Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
CVE-2013-1683
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2013-1688 The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site. | CVSS2: 9.3 | 3% Низкий | около 13 лет назад |
| CVE-2013-1687 The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implemen ... | CVSS2: 9.3 | 3% Низкий | около 13 лет назад |
| CVE-2013-1687 The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site. | CVSS2: 9.3 | 3% Низкий | около 13 лет назад |
| CVE-2013-1686 Use-after-free vulnerability in the mozilla::ResetDir function in Mozi ... | CVSS2: 10 | 5% Низкий | около 13 лет назад |
| CVE-2013-1686 Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. | CVSS2: 10 | 5% Низкий | около 13 лет назад |
| CVE-2013-1685 Use-after-free vulnerability in the nsIDocument::GetRootElement functi ... | CVSS2: 9.3 | 4% Низкий | около 13 лет назад |
| CVE-2013-1685 Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. | CVSS2: 9.3 | 4% Низкий | около 13 лет назад |
| CVE-2013-1684 Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::Lo ... | CVSS2: 9.3 | 4% Низкий | около 13 лет назад |
| CVE-2013-1684 Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. | CVSS2: 9.3 | 4% Низкий | около 13 лет назад |
| CVE-2013-1683 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS2: 10 | 5% Низкий | около 13 лет назад |
Уязвимостей на страницу