Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 18 439
CVE-2005-2268
Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
CVE-2005-2262
Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."
CVE-2005-2269
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
CVE-2005-2270
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.
CVE-2005-2265
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 ...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla ...
CVE-2005-2264
Firefox before 1.0.5 allows remote attackers to steal sensitive inform ...
CVE-2005-2262
Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers t ...
CVE-2005-2270
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone ...
CVE-2005-2260
The browser user interface in Firefox before 1.0.5, Mozilla before 1.7 ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2005-2268 Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." | CVSS2: 2.6 | 3% Низкий | больше 21 года назад |
| CVE-2005-2262 Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling." | CVSS2: 5.1 | 7% Низкий | больше 21 года назад |
| CVE-2005-2269 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing"). | CVSS2: 7.5 | 6% Низкий | больше 21 года назад |
| CVE-2005-2270 Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object. | CVSS2: 7.5 | 6% Низкий | больше 21 года назад |
| CVE-2005-2265 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 ... | CVSS2: 5 | 68% Средний | больше 21 года назад |
| CVE-2005-2263 The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla ... | CVSS2: 5 | 3% Низкий | больше 21 года назад |
| CVE-2005-2264 Firefox before 1.0.5 allows remote attackers to steal sensitive inform ... | CVSS2: 7.5 | 3% Низкий | больше 21 года назад |
| CVE-2005-2262 Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers t ... | CVSS2: 5.1 | 7% Низкий | больше 21 года назад |
| CVE-2005-2270 Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone ... | CVSS2: 7.5 | 6% Низкий | больше 21 года назад |
| CVE-2005-2260 The browser user interface in Firefox before 1.0.5, Mozilla before 1.7 ... | CVSS2: 7.5 | 3% Низкий | больше 21 года назад |
Уязвимостей на страницу