Mozilla Firefox — свободный браузер на движке Gecko

Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites. NOTE: The vendor has disputed this issue, stating that "The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision.

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.

Mozilla Firefox before 1.0 truncates long filenames in the file downlo ...

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attacker ...

Mozilla Firefox before 1.0 is installed with world-writable permission ...

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox befor ...

Firefox and Mozilla allow remote attackers to cause a denial of servic ...

Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some r ...

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitr ...

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.