Mozilla Firefox — свободный браузер на движке Gecko

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.

Mozilla Firefox before 1.0 truncates long filenames in the file downlo ...

Mozilla Firefox before 1.0 is installed with world-writable permission ...

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox befor ...

Firefox and Mozilla allow remote attackers to cause a denial of servic ...

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attacker ...

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitr ...

Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some r ...

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.