Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 304
CVE-2011-2368
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not ...
CVE-2011-2367
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
CVE-2011-2367
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not ...
CVE-2011-2365
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364.
CVE-2011-2365
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ...
CVE-2011-2364
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365.
CVE-2011-2364
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ...
CVE-2011-2363
Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
CVE-2011-2363
Use-after-free vulnerability in the nsSVGPointList::AppendElement func ...
CVE-2011-2362
Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2011-2368 The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not ... | CVSS2: 10 | 4% Низкий | около 15 лет назад |
 | CVE-2011-2367 The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors. | CVSS2: 6.4 | 2% Низкий | около 15 лет назад |
| CVE-2011-2367 The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not ... | CVSS2: 6.4 | 2% Низкий | около 15 лет назад |
| CVE-2011-2365 Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364. | CVSS2: 10 | 6% Низкий | около 15 лет назад |
| CVE-2011-2365 Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ... | CVSS2: 10 | 6% Низкий | около 15 лет назад |
| CVE-2011-2364 Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365. | CVSS2: 10 | 5% Низкий | около 15 лет назад |
| CVE-2011-2364 Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ... | CVSS2: 10 | 5% Низкий | около 15 лет назад |
| CVE-2011-2363 Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback. | CVSS2: 10 | 6% Низкий | около 15 лет назад |
| CVE-2011-2363 Use-after-free vulnerability in the nsSVGPointList::AppendElement func ... | CVSS2: 10 | 6% Низкий | около 15 лет назад |
| CVE-2011-2362 Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers. | CVSS2: 5 | 2% Низкий | около 15 лет назад |
Уязвимостей на страницу