Mozilla Firefox — свободный браузер на движке Gecko

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.

The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.

Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page.

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.

Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote atta ...

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 all ...

The Form Fill feature in Firefox before 1.0.1 allows remote attackers ...

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious ...

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozill ...