Mozilla Firefox — свободный браузер на движке Gecko

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, ...

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associa ...

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does no ...

Firefox before 1.0.5 allows remote attackers to steal information and ...

Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to ...

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.

Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.

Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.