Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 673
ELSA-2010-0809
ELSA-2010-0809: xulrunner security update (CRITICAL)
CVE-2010-3183
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox bef ...
CVE-2010-3183
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function.
CVE-2010-3182
A certain application-launch script in Mozilla Firefox before 3.5.14 a ...
CVE-2010-3182
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3181
Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 a ...
CVE-2010-3181
Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVE-2010-3180
Use-after-free vulnerability in the nsBarProp function in Mozilla Fire ...
CVE-2010-3180
Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.
CVE-2010-3179
Stack-based buffer overflow in the text-rendering functionality in Moz ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| ELSA-2010-0809 ELSA-2010-0809: xulrunner security update (CRITICAL) | 83% Высокий | почти 16 лет назад | |
| CVE-2010-3183 The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox bef ... | CVSS2: 9.3 | 6% Низкий | почти 16 лет назад |
 | CVE-2010-3183 The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function. | CVSS2: 9.3 | 6% Низкий | почти 16 лет назад |
| CVE-2010-3182 A certain application-launch script in Mozilla Firefox before 3.5.14 a ... | CVSS2: 6.9 | 0% Низкий | почти 16 лет назад |
| CVE-2010-3182 A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. | CVSS2: 6.9 | 0% Низкий | почти 16 лет назад |
| CVE-2010-3181 Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 a ... | CVSS2: 6.9 | 0% Низкий | почти 16 лет назад |
| CVE-2010-3181 Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory. | CVSS2: 6.9 | 0% Низкий | почти 16 лет назад |
| CVE-2010-3180 Use-after-free vulnerability in the nsBarProp function in Mozilla Fire ... | CVSS2: 9.3 | 5% Низкий | почти 16 лет назад |
| CVE-2010-3180 Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window. | CVSS2: 9.3 | 5% Низкий | почти 16 лет назад |
| CVE-2010-3179 Stack-based buffer overflow in the text-rendering functionality in Moz ... | CVSS2: 9.3 | 10% Средний | почти 16 лет назад |
Уязвимостей на страницу