Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156202320242025202620272028

Релизные элементы

KBВерсияБилдДата доступности
138.0.4138.0.4
138.0.3138.0.3
138.0.1138.0.1
138.0138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 673

redhat логотип

CVE-2006-4253

около 20 лет назад

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.

EPSS: Средний
debian логотип

CVE-2006-3812

около 20 лет назад

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMon ...

CVSS2: 2.6
EPSS: Низкий
ubuntu логотип

CVE-2006-3812

около 20 лет назад

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2006-3812

около 20 лет назад

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

CVSS2: 2.6
EPSS: Низкий
debian логотип

CVE-2006-3113

около 20 лет назад

Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and Se ...

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2006-3805

около 20 лет назад

The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird b ...

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2006-3811

около 20 лет назад

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbir ...

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2006-3801

около 20 лет назад

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not ...

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2006-3802

около 20 лет назад

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMon ...

CVSS2: 5.8
EPSS: Низкий
debian логотип

CVE-2006-3809

около 20 лет назад

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMon ...

CVSS2: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
redhat логотип
CVE-2006-4253

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.

15%
Средний
около 20 лет назад
debian логотип
CVE-2006-3812

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMon ...

CVSS2: 2.6
3%
Низкий
около 20 лет назад
ubuntu логотип
CVE-2006-3812

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

CVSS2: 2.6
3%
Низкий
около 20 лет назад
nvd логотип
CVE-2006-3812

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

CVSS2: 2.6
3%
Низкий
около 20 лет назад
debian логотип
CVE-2006-3113

Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and Se ...

CVSS2: 7.5
6%
Низкий
около 20 лет назад
debian логотип
CVE-2006-3805

The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird b ...

CVSS2: 7.5
7%
Низкий
около 20 лет назад
debian логотип
CVE-2006-3811

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbir ...

CVSS2: 7.5
8%
Низкий
около 20 лет назад
debian логотип
CVE-2006-3801

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not ...

CVSS2: 7.5
4%
Низкий
около 20 лет назад
debian логотип
CVE-2006-3802

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMon ...

CVSS2: 5.8
2%
Низкий
около 20 лет назад
debian логотип
CVE-2006-3809

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMon ...

CVSS2: 7.5
3%
Низкий
около 20 лет назад

Уязвимостей на страницу


Поделиться