Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 545
CVE-2006-2778
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.
CVE-2006-2776
Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.
CVE-2006-2775
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.
CVE-2006-2777
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
CVE-2006-2778
The crypto.signText function in Mozilla Firefox and Thunderbird before ...
CVE-2006-2777
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMon ...
CVE-2006-2775
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attribut ...
CVE-2006-2776
Certain privileged UI code in Mozilla Firefox and Thunderbird before 1 ...
CVE-2006-2776
Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.
CVE-2006-2778
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2006-2778 The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow. | CVSS2: 5 | 5% Низкий | больше 20 лет назад |
| CVE-2006-2776 Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended. | CVSS2: 7.5 | 6% Низкий | больше 20 лет назад |
| CVE-2006-2775 Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL. | CVSS2: 7.5 | 5% Низкий | больше 20 лет назад |
| CVE-2006-2777 Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context. | CVSS2: 7.5 | 6% Низкий | больше 20 лет назад |
| CVE-2006-2778 The crypto.signText function in Mozilla Firefox and Thunderbird before ... | CVSS2: 5 | 5% Низкий | больше 20 лет назад |
| CVE-2006-2777 Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMon ... | CVSS2: 7.5 | 6% Низкий | больше 20 лет назад |
| CVE-2006-2775 Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attribut ... | CVSS2: 7.5 | 5% Низкий | больше 20 лет назад |
| CVE-2006-2776 Certain privileged UI code in Mozilla Firefox and Thunderbird before 1 ... | CVSS2: 7.5 | 6% Низкий | больше 20 лет назад |
 | CVE-2006-2776 Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended. | CVSS2: 7.5 | 6% Низкий | больше 20 лет назад |
| CVE-2006-2778 The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow. | CVSS2: 5 | 5% Низкий | больше 20 лет назад |
Уязвимостей на страницу