Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 304
CVE-2011-3647
The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
CVE-2011-2998
Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.
CVE-2011-2998
Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote ...
CVE-2011-2998
Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.
CVE-2011-3866
Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.
CVE-2011-3866
Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly re ...
CVE-2011-3232
YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
CVE-2011-3232
YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, a ...
CVE-2011-3005
Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
CVE-2011-3005
Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunder ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2011-3647 The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004. | CVSS2: 6.8 | 2% Низкий | почти 15 лет назад |
 | CVE-2011-2998 Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression. | CVSS2: 10 | 5% Низкий | почти 15 лет назад |
| CVE-2011-2998 Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote ... | CVSS2: 10 | 5% Низкий | почти 15 лет назад |
 | CVE-2011-2998 Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression. | CVSS2: 10 | 5% Низкий | почти 15 лет назад |
| CVE-2011-3866 Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab. | CVSS2: 4.3 | 1% Низкий | почти 15 лет назад |
| CVE-2011-3866 Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly re ... | CVSS2: 4.3 | 1% Низкий | почти 15 лет назад |
| CVE-2011-3232 YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript. | CVSS2: 9.3 | 5% Низкий | почти 15 лет назад |
| CVE-2011-3232 YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, a ... | CVSS2: 9.3 | 5% Низкий | почти 15 лет назад |
| CVE-2011-3005 Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file. | CVSS2: 9.3 | 4% Низкий | почти 15 лет назад |
| CVE-2011-3005 Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunder ... | CVSS2: 9.3 | 4% Низкий | почти 15 лет назад |
Уязвимостей на страницу