Mozilla Firefox — свободный браузер на движке Gecko

Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain privileges.

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.

Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites. NOTE: The vendor has disputed this issue, stating that "The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision.

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attacker ...

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox befor ...

Firefox and Mozilla allow remote attackers to cause a denial of servic ...

Mozilla Firefox before 1.0 truncates long filenames in the file downlo ...

Mozilla Firefox before 1.0 is installed with world-writable permission ...

Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some r ...